Līve Ambitions

Here’s another email phishing scam to watch out for.

Email Subject Line:

Notification of Limited Account Access RXI033

Email Body:

Hello Steve,

As part of our security measures, we regularly screen activity in the PayPal
system. We recently contacted you after noticing an issue on your account.

We requested information from you for the following reason:

A recent review of your account determined that we require some additional
information from you in order to provide you with secure service.

Case ID Number: PP-766-695-887

This is a second reminder to log in to PayPal as soon as possible. Once you log
in, you will be provided with steps to restore your account access.

Be sure to log in securely by using the following link:
Click here to login and restore your account access

Once you log in, you will be provided with steps to restore your
account access. We appreciate your understanding as we work to ensure account
safety.

In accordance with PayPal’s User Agreement, your account access will remain
limited until the issue has been resolved. Unfortunately, if access to your
account remains limited for an extended period of time, it may result in further
limitations or eventual account closure. We encourage you to log in to your
PayPal account as soon as possible to help avoid this.

To review your account and some or all of the information that PayPal used to
make its decision to limit your account access, please visit the Resolution
Center. If, after reviewing your account information, you seek further
clarification regarding your account access, please contact PayPal by visiting
the Help Center and clicking “Contact Us”.

We thank you for your prompt attention to this matter. Please understand that
this is a security measure intended to help protect you and your account. We
apologize for any inconvenience.

Thanks,

PayPal Account Review Department

Please do not reply to this email. This mailbox is not monitored and you
will not receive a response. For assistance, log in to your PayPal account
and click the Help link in the top right corner of any PayPal page.

—————————————————————-
Copyright © 1999-2009 PayPal. All rights reserved.

PayPal Email ID PP522

The way to tell if this is a scam is by hovering over the links within the email body.  The URL that is exposed looks something like this:

http://www.paypal.com.0qrrxs8jmav.003elsvvwfve4jw6cyx2.com/cgi-bin/webscr/?login-dispatch&login_email=&ref=pp&login-processing=ok

As you can see, the actual domain name is: 003elsvvwfve4jw6cyx2.com, not paypal.com.  This is a sneaky attempt to disguise the real domain.

And as usual, they’ve disguised the “from” field with service@paypal.com.