RE: Credit Card Fraud - Yet Another One

[Guest guest]

Earthlink - Virtually identical to the eBay and Paypal scams EXCEPT the

person(s) doing this are pros, and

slick ones at that. In contrast to the other two scams (and other email scams

aimed at gaining personal, bank

and/or credit card info), the Earthilink email contains no spelling or grammar

errors. They use Earthlink's

color scheme and logo on the email, and on the webpage they hyperlink to. The

hyperlink in the email looks

legitimate, complete with HTTPS ... an indication of a secure server page.

 

There are four things that give it away: 1. Earthlink will not use this method

to obtain personal, account

and credit card info. 2. The hyperlink redirects you to a NON-secure page that

uses a numerical IP address

instead of the web URL of the hyperlink. 3. They hardcoded the " earthlink.net "

portion of where you input

your email address. Earthlink and Mindspring merged some time ago, and some

accounts are earthlink.net and

some are mindspring.com (ours is Mindspring). 4. In the headers, the return

addy was at collegeclub.com

 

While Michael and I have not been on the receiving end of the eBay, Paypal or

Nigerian scams, we did receive

the Earthlink one, which is why I know the specifics of how good the fake is,

and what's wrong with it. If

you have an Earthlink or Mindspring account, and receive this scam email,

forward it to webfraud

 

When you forward scam emails to a fraud department, you need to make sure to

include complete headers. It's

not an easy thing to explain, but eBay's help section explains how to do it at

http://pages.ebay.com/help/policies/rfe-spam-send-headers.html

 

Carol

 

Dragon's Pearls

Herb Shoppe: http://herbshoppe.dragonspearls.com

Computer Consulting: http://computers.dragonspearls.com