Is this PayPal/SDMB thing legit or phishing?

[Myglaren]

I recently received an email from PayPal - to the correct email account - reminding me that my card was about to lapse and to register a replacement with them.

I ignored it the first couple of times then logged in to my PayPal account to find that although I had logged my new card with them, upon receipt of it, I hadn’t activated it.

Although I was at first suspicious it proved to be quite legit.

[Oslo_Ostragoth]

So, I logged in to PayPal and did the thing there. Seems legit.

[simster]

Sounds like there are two versions of this email going around - the legit one, and a phishing one that is pretty much a copy of the legit one except for bad links.

As others have said - legit email or not - you will never hurt yourself by typing in the url and going to paypal directly to check it out.

make it a habit of Never clicking on banking/account related links within email -

[psychonaut]

@simster

Sounds like there are two versions of this email going around - the legit one, and a phishing one that is pretty much a copy of the legit one except for bad links.

As others have said - legit email or not - you will never hurt yourself by typing in the url and going to paypal directly to check it out.

Assuming you type it correctly, yeah. I’m sure lots of scammers register domains which are typographically inaccurate renditions of “paypal.com”.

[Petek]

I received an email message similar to the one in the OP. I forwarded it to spoof@paypal.com and received the following reply:

Thanks for forwarding that suspicious-looking email. You’re right - it
was a phishing attempt, and we’re working on stopping the fraud. By
reporting the problem, you’ve made a difference!

Identity thieves try to trick you into revealing your password or other
personal information through phishing emails and fake websites. To learn
more about online safety, click “Security Center” on any PayPal webpage.
Every email counts. When you forward suspicious-looking emails to
spoof@paypal.com, you help keep yourself and others safe from identity
theft.

Your account security is very important to us, so we appreciate your
extra effort.

Thanks,

PayPal

However, when I directly accessed paypal.com and logged in, I also was informed of the need to “consent to our Electronic Communications Delivery Policy.”

[Spoons]

@simster

Sounds like there are two versions of this email going around - the legit one, and a phishing one that is pretty much a copy of the legit one except for bad links.

I received one of the phishing ones today. I knew it was a phishing one because I don’t have a PayPal account, and never did. But there were also a few spelling errors (for example, “Dear Costumer”) and awkward-sounding, almost-too-formal phrasing (“If you could please take 5-10 minutes out of your online experience and update your personal records you will not run into any future problems with the online service”) that would have sent up red flags regardless.

I forwarded it to spoof@paypal.com, and hopefully, they can deal with it.