From: Paypal Security
Subject: New Security Requirements
Date: Tue, 26 Jul 2005 19:20:51 -0800

Dear valued PayPal member,

Due to recent fraudulent transactions, we have issued the following security requirements.

It has come to our (attion)**Spelling Mistake**, that 98% of all fraudulent transactions are caused by members using stolen credit cards to purchase or sell non existant items. Thus we require our members to add a (Debit/Check card)**Ding Ding Ding are your Alarm Bells going off Yet ?** to their billing records as part of our continuing commitment to protect your account and to reduce the instance of fraud on our website. Your Debit/Check card will only be used to identify you. **YEAH RIGHT!!!** If you could please take 5-10 minutes out of your online experience and renew your records you will not run into any future problems with the PayPal service. However, failure to confirm your records will result in your account suspension.**All Paypal Accounts Earn Good Money For Paypal, Why Suspend Them?**

We are requesting this information to verify and protect your identity. Federal regulations require all financial institutions to obtain, verify, and record identification from all persons opening new accounts or obtaining ongoing payment services. This is in order to prevent the use of the U.S. banking system in terrorist and other illegal activity. For these reasons, PayPal will utilize services provided by various credit reporting agencies to verify the information you submit to us. **Did Paypal Forget Their Rock Solid Verification System?**

Once you have updated your account records your pending PayPal account transactions will not be interrupted and will continue as normal.

To update your billing records please login to your account by clicking here.**DING DING DING, ALARMS, BELLS, WHISTLES**

Thank you for your time,
PayPal Billing Department.

The click here address is (but dont click it!) :-
http://paypal-secure-signin.com/cgi/webscr.html?cmd=_login-run
Notice the http:// should be a secure https://

Whois Information for the website:_
::Name Servers::
ns6844.paypal-secure-signin.com
ns9386.paypal-secure-signin.com

::Dates & Status::
Created Date 2005-07-23 11:07:18 EDT
Updated Date 2005-07-23 11:07:18 EDT
Valid Date 2006-07-23 11:07:18 EDT
Status ACTIVE

Moral of this Story:- NEVER CLICK FROM AN EMAIL TO A SUPPOSEDLY SECURE SITE
Chances are it is not!

By the way if you did click that link it looks like a very good replica of Paypal, but ask yourself these questions:

# 1. Why is the color of the address bar still the same, Paypals secure bar is not a white background, but more a beige color, which incidentally matches a graphic bar on their website.

# 2. The Email address box on paypal is ALWAYS filled in with my email when I arrive at Paypals site, this copy websites box is not showing any email at all.

# 3.The Whole page is Different.

# 4. In the Status Bar at the bottom of the screen there should be a Padlock for a secure website such as Paypal. If you look at Paypals login screens status bar it also says www.paypal.com then the padlock is shown.

Well, I hope this helps you to be more alert when checking your emails.

Have A Safe And Secure Day!!! ;-)