Fraudulent E-mail! Help!

[WXRULES]

I have done the DUMBEST thing of my life...

I got an e-mail asking me to update my Paypal account (for E-bay). It included a link that I clicked on and brought me to an 'official' looking Paypal page (fonts, colors, everything).

Of course, what do I do, fill out ALL information including SSN, DOB, passwords, credit card number, and the works...

After I hit 'submit' and a popup window appeared instead of a Paypal page. I immediately grew suspicious...

Sure enough, I looked up 'fradulent tips' on Paypal and came to the conclusion that I was hit by a fraud. So now, some person has got ALL my personal information.

So, for the whole morning, I've been trying to stop things before they start. I changed by Paypal/E-bay accounts, I'm trying to contact Equifax and put a 'Fraud Alert' up and soon I'll call my back to cancel the card # that I gave out.

Has anyone else gone through this? Any helpful info you can give to me? I appreciate it. I always thought I could spot a fraudlent e-mail, but now I really feel like a total A@@ for falling for something like this.

[Deconstruction Inc.]

That was pretty dumb. :(
NEVER, EVER give out your personal information without checking it out!!

[WXRULES]

Yeah, thanks. I think I found that out the hard way...

[MIKEWJORDAN]

way to go dumbass haha you NEVER give out a password or card #

[TVMattNYC]

Originally posted by MIKEWJORDAN:
way to go dumbass haha you NEVER give out a password or card #Oh just STOP IT. The poor dude knows he made a mistake and he's asking for advice. He's NOT asking for ridicule.

[facts]

Man, you know you made a mistake when MIKEWJORDAN is calling *you* a dumbass.

My wife nearly fell for the same thing. I just got an "eBay" phish that looked pretty authentic.

[WXRULES]

Ridicule is fine (believe me I can feel much lower), but advice would be better...

[Deconstruction Inc.]

Not alot of advice to be had here.
Don't do it.
Once you've bitten you're pretty much screwed.
Cancel your cards and try to minimize the damage.

[WXRULES]

I'm working 'damage control' this morning and it's truly a pain -- how I wish I had finished that time machine I was working on...

[StopYerBitchin]

Originally posted by WXRULES:
Ridicule is fine (believe me I can feel much lower), but advice would be better...Call your state's Attorney General's office. Explain what happened. They may have a program set up to help.

[still unregistered]

Call your credit card companies and cancel EVERYTHING.

Sorry, this must suck. :(

[Irony]

Originally posted by StopYer*****in:
Call your state's Attorney General's office. Explain what happened. They may have a program set up to help.Yes.

[jama]

If they have your SSN they can steal your identity, which means they can get new cards in your name. Canceling everything is good but you may be in for a lot more than expected.

[WXRULES]

Right, which is why I'm adding a 'fraud alert' to my credit reports which requires agencies to call before any new cards or accounts are activated.

I'll definitely contact the state Attorney General's office. Thanks!

[jama]

Hope this helps...

http://www.ftc.gov/bcp/conline/pubs/alerts/idenalrt.htm

[That Camera Guy]

http://oak.cats.ohiou.edu/~anderse1/imghst/nelson.gif

[Still A Mean MCO]

Originally posted by WXRULES:
I have done the DUMBEST thing of my life...

I got an e-mail asking me to update my Paypal account (for E-bay). It included a link that I clicked on and brought me to an 'official' looking Paypal page (fonts, colors, everything).

Of course, what do I do, fill out ALL information including SSN, DOB, passwords, credit card number, and the works...

After I hit 'submit' and a popup window appeared instead of a Paypal page. I immediately grew suspicious...

Sure enough, I looked up 'fradulent tips' on Paypal and came to the conclusion that I was hit by a fraud. So now, some person has got ALL my personal information.

So, for the whole morning, I've been trying to stop things before they start. I changed by Paypal/E-bay accounts, I'm trying to contact Equifax and put a 'Fraud Alert' up and soon I'll call my back to cancel the card # that I gave out.

Has anyone else gone through this? Any helpful info you can give to me? I appreciate it. I always thought I could spot a fraudlent e-mail, but now I really feel like a total A@@ for falling for something like this.Dude...you deserve to get taken to the cleaners for being that stupid. Even a third grader knows not to be THAT dumb.

[Todd W.]

Originally posted by Still A Mean MCO:
Dude...you deserve to get taken to the cleaners for being that stupid. Even a third grader knows not to be THAT dumb.I dunno, I think it's even more stupid to keep creating accounts on a forum that repeatedly bans you and doesn't want you around. Luckily I don't mind tracking your multiple accounts and IP addresses when someone really ticks me off. So buh-bye Mean MCO, again. I'm now dedicating myself to keeping you out of this forum, I don't care how much of my time it takes.

WXRULES, don't feel stupid. You will certainly know better next time.... I called my credit card company when something similar happened to me and they were very helpful with advice on my next steps. I had to learn a lesson like this the hard way, too.

-Todd

[WXRULES]

Thanks for the advice everyone. I've done pretty much everything I can do. I've contacted my bank, credit companies, IFCC, FTC, and the police. Our local law enforcement traced the e-mail to Singapore. They said there isn't much they can do until they start using the account(s). Now I have to watch very carefully. What a mess I've made... Thanks again for the helpful tips!

[Crash Davis]

I've been the victim of identity theft for more than 5 years... it's a nightmare. I've got one fraudulent account left on one credit report, but that little bugger has been nigh unto impossible to get rid of.

Be sure you contact ALL THREE credit bureaus IMMEDIATELY and get fraud alerts put on your credit reports.

The alert should REQUIRE the credit bureaus to contact you by phone before approving any credit in your name. Give them contact info that only you have, like a cell phone number or home phone number.

Also, I would seriously advise you to cancel all your accounts and reopen them with different account numbers. I'm talking bank accounts, credit cards, cell phone accounts, everything.

It's a serious pain, yes, but nothing compared to trying to undo the fraud once it's happened.

Also, the Federal Trade Commission website (http://www.consumer.gov/idtheft/) has extensive info on avoiding ID theft and what to do if it happens.

Good luck.

[ May 26, 2004, 09:23 AM: Message edited by: Crash Davis ]

[Angel's Hell]

I dunno...this sounds like a great story to me! A warning on the dangers of giving out information and the *newest* ways scam artists are working on the web.

[ThetaBurst]

WXRULES, the email orginally sent to you may also work as a very effective tool to get to the bottom of this.

In addition to the steps you can take that have already been mentioned, you should forward the email along with a complaint to the ISP from which it orginates.

[Desert Rat]

WXRules,

Sorry to hear that......I hope that nothing happens to you...

Here's an idea...turning lemons into lemonade...has your station done a story on this yet? They don't have to use you personally but giving out information and tips on if it happens to anyone out there.

Good luck to you...

[jama]

Originally posted by Desert Rat:
WXRules,

Sorry to hear that......I hope that nothing happens to you...

Here's an idea...turning lemons into lemonade...has your station done a story on this yet? They don't have to use you personally but giving out information and tips on if it happens to anyone out there.

Good luck to you...This reminds me of a story -

A local reporter did a story about burglaries and how to prevent them. He used his house during the report. The next night, while he was at work, his house was robbed.

[Vocalgalykketyyak]

WXRules,

As I read this thread, I wondered myself if there's an opportunity to channel this mess into something positive like a story for your station to cover. Always remember that there's a reason for everything. You can use this incident to your advantage, or you can let it eat you alive.

Thanks to jama for affirming my thoughts!

Best wishes to you, WXRules!

[Laughing Angel]

Transunion, Experian and Equifax.

Get in touch with all three right away! Keep in touch for as long as it takes.

You'll have to invest some real time cancelling the old accounts and watching the new accounts carefully. Remember, these scammers can get cars, apartments, passports, house notes, etc. in your name if you're not careful. And don't forget to SHRED EVERYTHING!

Sorry you're having to go through this.

[ May 26, 2004, 03:13 PM: Message edited by: Laughing Angel ]

[ciscoubr]

I'm sure parts of this were already mentioned, but if your credit cards and checking/bank accounts are with two different compaines, make sure you contact the bank that holds your checking account about your recent mishap.

I've yet to run into this, but I know what a hassle it must be. Thankfully, with credit cards at least, you won't be liable for any charges incurred. (see the "Do you sign the back of your credit cards" thread for more info).

AND BE SURE TO CONTACT THE THREE CREDIT REPORTING AGENCIES IMMEDIATELY.

Also, if you have a family/others living in the houes, tell them that if someone calls from ANY company asking for information to not give it out, and have YOU call them personally. There's nothing worse than getting in all this mess, sorting it out, and having your wife give out your new credit card # or SSN to some idiot calling and claiming to be from the Bank of Taiwan.

Good Luck!
Ciscoubr.

[Lá Fhéile Pádraig Sona Daoibh]

PayPal is evil. Star away...far away.

[WXRULES]

Thanks again for all the helpful info everyone! Yes, I did most of what I should yesterday to prevent what I can. I thought of a few more things today to help as well...

Yes, I contacted all THREE credit companies and the police said I should check my credit report at least every 3 months for up to 2 years.

Strangely, a number of you were mentioning that this would make a great story...turns out my ND thought the same thing...somehow, that was the LAST thing from my mind yesterday, but I think it is a good idea, so that others won't be as gullible as I.

Thanks again!

[Up Your Nose With a Rubber Hose]

Originally posted by Hey, I Just Work Here:
PayPal is evil. Star away...far away.OK! I will star far, far away!

[14 GHz]

Sorry to hear that. But sometimes the scammers get theirs too! Read this account (http://easynetworknyc.com/powerbook/pdfhtml.php) and maybe it will cheer you up!

Its about this guy selling a Apple Powerbook on eBay when a scammer in the UK tried to buy the PC using a fake escrow site. The seller knew what was up, but played along. He sent a P-P-P-Powerbook (http://easynetworknyc.com/powerbook/index.php#pictures) and put the value at a few thousand dollars for customs.

In order for the scammer to get the package, he had to pay the 27.5% customs tax (on $3500) to have it released! HAHAHA! Its a great on-going story. This thing has a cult following online. There were even people watching the FedEx truck deliver the PPPPowerbook to the scammers office and taking video!

http://easynetworknyc.com/powerbook/images/Keys1.jpg

[ May 27, 2004, 08:44 PM: Message edited by: 14GHz ]

[Diana Eva Maldonado]

This type of scam is called "Phishing" ... scam artists are fishing for your information.

Here is a story one of our sister stations - KCBD - did on the issue earlier this year.
----------------------
"Scammers Are 'Phishing' For Your Identity

E-mail scams are circulating the internet, deceiving consumers into giving up their personal information and sometimes their identity. Jacquelyn Rhodes is one of those victims. "It looked really official in big bold letters, saying the account would be closed in 24 hours, if I didn't do it. It would be terminated and I didn't want that to happen." Rhodes is talking about an e-mail that she received from her internet provider, stating her service would be canceled if she didn't update her account information. "There was a hyper link and I clicked on it and it took me to a different page. It said AOL billing center and it looked totally official."

But the website wasn't official. It was a scam that stole Rhodes's personal information. "I realized I was scammed when later that evening I logged back on and the master screen name was already logged on and no one in the house was online."

The scam is called 'Phishing'. Consumer Protection Expert Sally Hurme explains, "Phishing is an online scam that uses spam and the internet to deceive consumers into disposing their personal and financial information. The scammers then use that information to commit identity theft."

Here's how it works. The scammer will send you an e-mail, claiming to be from a company you probably do business with like your internet provider, a bank or credit card company. It will give you a link to update your account information. Hurme says, "The consumer clicks on the link and will go to a web page that looks identical to the one being spoofed and a consumer who enters their information on the web page thinks it is going to the company but it isn't. It's going to the scammer instead." Hurme says, Phishing is a two way scam. "First the company is scammed when their images and logos are stolen and secondly the consumer is scammed in the stealing of the identity and personal information."

Patti Poss with the Federal Trade Commission says the best thing to do is delete the e-mail.
"Companies don't do this. They don't get in touch with you this way. Only criminals do."

To protect your identity from internet scammers, practice the following safety solutions. Never give out your personal or financial information online ever. Call companies you do business with directly. Do not click on links, provided in an e-mail. If you think you've been scammed, call the three major credit reporting companies immediately so they can put a red flag on your credit account. You can reach the companies as follows:

Equifax 1-800-525-6285
Experian 1-888-397-3742
TransUnion 1-800-680-7289

You should also call the Federal Trade Commission and file a report. You can call the FTC at 1-877-438-4338 or ( click here ) to file a complaint online however, if you're more comfortable with going to that website directly after reading this report, that address is ( www.ftc.gov). (http://www.ftc.gov).)

The latest Phishing scam is under investigation by the FBI and FDIC. The e-mail claims to come from the FDIC, telling you to update your bank account information or you will be in violation of the Patriot Act. If you get an e-mail like this or others, you're urged to report it immediately. You can send that claim to ( alert@fdic.gov).

[pizzazz]

Make sure you do a police report. It's a good record to have in case false expenses start showing up somewhere... like someone takes out a cell phone in your name. Yeah, that was fun.

[boycottwkbn]

Hi. Relax a little, it isn't that bad. I didn't go thru paypal, but somehow someone got my credit card info and used it to subscribe to some pay websites. Just keep an eye on your monthly statements, if there are charges you didn't make, phone the credit card issuing company/bank, and dispute the charges. They will take care of any investigation or legal action necessary, and refund your money in about a week. You don't need to cancel your account(s), just ask them to change the card number.

[tellavison]

I feel your pain. A friend of mine fell for the same scam. People on this board who are quick to kick someone when they are down are as bad and the scammers.

p.s. I have personally found a great way to make yourself 'identity theft proof'.... Have REALLY bad credit!!!!!

[ May 30, 2004, 11:57 PM: Message edited by: tellavison ]

[WXRULES]

Thanks guys! I did everything I could to help myself out of this 'phishing' scam. I even filed a police report.

I have another question, maybe someone knows this or not: I was thinking of applying for that Equifax Credit Watch thing, and they say that it insures you for up to $250,000 of fraud.

Aren't you only liable for a maximum amount of fraud? In other words, I thought I heard that those who filed a fraud case were only liable for some much regardless of what they were scammed out of -- like $250 or something. Is that true? If so, why would do they and about every credit card on the planet offer fraud insurance? Just curious.

In any case, thanks again for the helpful tips! Needless to say I have to sit and closely analyze my Yahoo password page to make sure it's not a fake one...yeah, I'm extra suspicious now...