Here's a PayPal phishing email I received. I've included the header, the email itself, and PayPal's spoof department.

I thought you should see all this information in one place, to see the process of reporting fraud emails.


Be safe!


Toodles,

Lisa :)


The email header:

Return-Path: <service@paypal.com>
Received: from etsws01.ets.biz (ns0.ets.biz [217.160.207.55])
     by svr6.marketrends.net (8.13.6/8.12.7) with ESMTP id
k7T177Qq032690
     for <editor@lisareddell.com>; Mon, 28 Aug 2006 18:07:07 -0700 (PDT)
     (envelope-from service@paypal.com)
Message-Id: <200608290107.k7T177Qq032690@svr6.marketrends.net>
Received: from home-61.177.smanet.ro [89.32.61.177] by etsws01.ets.biz
with SMTP;
     Tue, 29 Aug 2006 02:04:27 +0100
From: "service@paypal.com"<service@paypal.com>
Subject: PayPal Notification: Confirm Transaction
Date: Tue, 29 Aug 2006 04:05:07 +0300
MIME-Version: 1.0
Content-Type: text/html;
     charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 1
X-MSMail-Priority: High
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
To: undisclosed-recipients:;


The email itself:



The HTML Coding:

PayPal BODY, TD {font-family: verdana,arial,helvetica,sans-serif;font-size: 12px;color: #000000;} LI {line-height: 120%;} UL.smallBorder {margin:10px 5px 10px 20px;} LI.smallBorderLi {margin:0px 0px 5px 0px;} UL.Narrow {margin:10px 5px 0px 40px;} HR.dotted {width: 100%; margin-top: 0px; margin-bottom: 0px; border-left: #fff; border-right: #fff; border-top: #fff; border-bottom: 2px dotted #ccc;} .smallEmphasis {font-family: verdana,arial,helvetica,sans-serif;font-size: 11px;font-weight: bold;color: #000000;} .serifBig {font-family: serif;font-size: 20px;font-weight: bold;color: #000000;} .serif{font-family: serif;font-size: 16px;color: #000000;} .sansSerif{font-family: verdana,arial,helvetica,sans-serif; font-size: 16px;color: #000000;} .heading {font-family: verdana,arial,helvetica,sans-serif;font-size: 18px;font-weight: bold;color: #003366;} .subHeadingEoa {font-family: verdana,arial,helvetica,sans-serif;font-size: 15px;font-weight: bold;color: #000000;} .subHeading {font-family: verdana,arial,helvetica,sans-serif;font-size: 16px;font-weight: bold;color: #003366;} ..sidebarText {font-family: verdana,arial,helvetica,sans-serif;font-size: 11px;color: #003366;} .sidebarTextBold {font-family: verdana,arial,helvetica,sans-serif;font-size: 11px;font-weight: bold;color: #003366;} .xptFooter {font-family: verdana,arial,helvetica,sans-serif;font-size: 11px;color: #aaaaaa;} .button {font-size: 13px; font-family: verdana,arial,helvetica,sans-serif; font-weight: 400; border-style:outset; color:#000000; background-color: #cccccc;} .smaller {font-family: verdana,arial,helvetica,sans-serif;font-size: 10px;color: #000000;} .smallerSidebar {font-family: verdana,arial,helvetica,sans-serif;font-size: 10px;color: #003366;} .emphasis {font-weight: 700;} table#invoice, table#invoice_controls, table#invoice_note { width: 600px;} table#invoice_note {margin-top:10px; margin-bottom:10px;} table#invoice_controls {text-align: right;} table#invoice {border-collapse: collapse; border:1px solid #aaa; } table#invoice td {font-size:11px; border:1px solid #ccc; padding:2px;} table#invoice td.field_label_right, table#invoice td.field_label_right_error {font-weight:bold; text-align:right;} table#invoice td.field_label_right_error, table#invoice td.field_label_error {color:red;} table#invoice tr.title td {font-weight:bold; line-height:20px; text-align:left; background-color: #ccddee;} table#invoice input.readonly {border:0px none; text-align:right} table#invoice input.readonly_currency {border:0px none; width:10px} .field_error, .field_error input.readonly_currency {background-color:#FF3333;} .currency_highlight {background-color: #ffffcc;} .tax {font-weight: 400; float: left;} table#invoice td span.curr {float: left;} table#invoice td.currency {border-right:1px solid #fff;} table#invoice td.calc {font-weight:bold; text-align:right;} .inlineBlue {color: #00f;} .small {font-size: 11px; font-weight: 400;} HR.solid {width: 100%; margin-top: 5px; margin-bottom: 0px; border-left: #fff; border-right: #fff; border-top: #fff; border-bottom: 2px solid #999;} .large {font-size: 17px;} .smallVerdanaGrey{font-family: verdana; font-size: 10px; color: #999999;} .smallVerdana {font-family: verdana; font-size: 10px; color :#000000;} .smallArial {font-family: arial; font-size: 13px; } .smallArialBlue {font-family: verdana; font-size: 9px; color: #0000FF;} .smallVerdanaGreen{font-family: verdana; font-size: 10px; color: #666666;} .smaller {font-size: 10px; color: gray;} .larger {font-size: 18px; font-family: arial; font-weight: 600; } .longTableValue{word-break:break-all;} .longSideBarText{width:190px; word-break: break-all;} Dear member, This email confirms that you have paid orders@dell.com $699.99 USD using PayPal. This credit card transaction will appear on your bill as "PAYPAL *DELL INC". Payment DetailsPurchased From:Dell.Inc Item #Item TitleQuantity


My email to PayPal:

Original Message Follows:
-------------------------

Good Morning,
I received two of the same email in my inbox this morning. I have not
had any transactions in my account for the shown amount. I do not show
any odd activity either in my history.
I am including the header, the actual email and the html coding for you.
Sincerely,
Lisa Reddell
editor@lisareddell.com


PayPal's Reply

Dear Lisa Reddell,

Thank you for contacting PayPal about a fraudulent (spoof) email or Web
site. We appreciate you bringing this suspicious email to our attention.

We can confirm that the email you received was not sent by PayPal. Any
website which may be linked to this email is not authorized or used by
PayPal.

Our fraud prevention team is working to disable any website linked to
this email. In the meantime, please do not enter any information into
this website. If you have already done so, you should immediately log
into your PayPal account and change your password, as well as your
security questions and answers. We also recommend that you contact your
bank and credit card company immediately.

Please follow the instructions below to report an unauthorized
transaction associated with your PayPal account:

If you are able to log into your PayPal account:

1. Log in to your account at https://www.paypal.com
2. Select the "Resolution Center" subtab.
3. Click "Open a dispute."
4. Select "Unauthorized transaction," then click "Continue."
5. Enter or select the transaction ID for the transaction you would like
to dispute, then click "Continue."
6. Complete the report for Unauthorized Use on a PayPal Account, then
click "Continue."
7. Confirm that the claim is correct, then click "Submit."

If you cannot log in to your account, follow the instructions below to
report an unauthorized transaction associated with your PayPal account:

1. Go to https://www.paypal.com/
2. Click on the "Security Center" link located at the bottom of any
page.
3. Under the "Report a Problem" column, click on "Unauthorized
Transaction."
4. Click "Continue" under "Unable to log in?"
5. Confirm that the transaction in question is unauthorized then click
"Continue."
6. Complete the report for Unauthorized Use on a PayPal Account, then
click "Preview."
7. Confirm that the claim is correct, then click "Submit."
8. Confirm your account ownership by entering the financial information
requested, then click "Continue."

Lastly, we recommend taking a few steps to protect yourself from
identity theft:

1. Download the SafetyBar, a toolbar for Outlook and Outlook Express,
which identifies known spoof emails.
2. Get eBay Toolbar with Account Guard which warns you when you're on a
potentially fraudulent (spoof) Web site.
3. Sign up for Equifax Credit Alerts for PayPal Users, a program that
provides an early warning detection system in the event of identity
theft. Find out more by visiting the PayPal Identity Protection Center
at www.paypal.com/idprotection.
4. Frequently monitor your PayPal account for suspicious activity.

For additional tips please visit the PayPal Security Center at
https://www.paypal.com/security.

Thank you again for sending us your report. We appreciate your efforts
to keep PayPal safe.

Sincerely,

PayPal
PayPal Account Review Department
______________________________________________________________

Important: PayPal and its representatives will NEVER ask you to reveal
your password. There are NO EXCEPTIONS to this policy. If anyone
claiming to work for PayPal asks for your password under any
circumstances, by email or by phone, please refuse and immediately
contact us via our secure webform online.


************************************************************************
This
email is sent to you by the contracting entity to your User Agreement,
either PayPal Inc or PayPal (Europe) Limited. PayPal (Europe) Limited is
authorized and regulated by the Financial Services Authority in the UK
as an electronic money institution.

OMG,
I cannot believe how manyy of these nasty scams are out there. I have not personally seen this one either but it's always great to have a friend watch out for all of us..
Thanks my friend

At best it is irritating. They have to be taken on a case by case basis
because there are many despirate criminals. If they put half the work
into an honest business, they would make more money at it.