PayPal users are again being targeted by a different type of phishing email that now tricks users into calling a phone line to confirm their creditcard details.

The email sent to users looks like it has come from PayPal , claims that the recipients account has been subjected to fraudulent activity. However it doesn't have web link or response address unlike normal phishing emails. Instead, the email asks to call a phone number to verify their creditcard details. When called, users are greeted by an automated voice Message as:

"Welcome to account verification. Please type your 16 digit card number."

Once the user enters their credit card details, the scammer is free to steal the information for their own gain. If a incorrect card details are entered, a request for to reentre is made. Funny part is that still this fraudulent number is still alive.

"Users that type in their card information may think they're verifying their PayPal account, but in actual fact, they're handing their details over to cyber criminals on a plate," said Graham Cluley, senior technology consultant at Sophos. "Though it's an US cellphone number, the fact that PayPal is used globally means that anyone could potentially be tricked into making this call."

Send to a friend | Permalink | Del.icio.us | Go To Top
Translate: