New Twist on Phishing Schemes

[paladin]

Heads up,

I just got a PayPal payment request from someone I do not know. A quick look shows that the payment link actulay goes to the PayPal site. So it is not the normal phising attempt.

On the details of the service listed it says "Post inclusion" and "Service".

So is someone just randomly sending out payment requests hoping that some people will actually pay it? Kind of like those domain inclusion postcards/letters where they they say in very small print that this is not a bill (yet).

[LifeinAsia]

A quick look shows that the payment link actulay goes to the PayPal site.

Did you just mouse over the link or did you actually view the source code?

I've seen a lot of phishing e-mails that use nested a href tags (the browser shows the inner link to PayPal, but the outer link to the phishing site is where the link actually goes).

Regardless, I'd forward the e-mail to PayPal.

[rocknbil]

I've seen this from time to time. I've also seen payment requests due to a typo. It could be either.

[cabowabo]

I've seen this one and it does redirect you to the phishing site, not PayPal. They are getting good, aren't they?