The email message below with the subject: "Incorrect login", is a phishing PayPal scam designed to steal your PayPal user name and password. The email message tries to trick the recipient into visiting a phishing or fake PayPal website, designed to look exactly like the legitimate PayPal.com website. On the phishing website, if the recipient enters his/her PayPal's user name and password, it will be sent to the scammers behind this scam.
The PayPal Phishing Email
From: PayPal no-reply.pay-pal@incorrect.se
Date: 2013/7/5
Subject: ID:7W263786RM05513031 - Incorrect login.
Dear Customer,
Within PayPal latest security checks, we recently discovered that today there were 3 incorrect login attempts to your account.
For your safety, PayPal set your account status to limited. For your account status to get back to normal, you will have to Sign In correctly at: https://www.paypal.com.cgi.bin-login/webscr?cmd=_login-submit
Due to our latest fraud attempts, the following IP adresses were recorded:
Invalid login from:
*.*.11.113 dells.dk
Invalid login from:
*.*.121.127 bitssh.gr
Invalid login from:
*.*.130.131 net.il
Protect Yourself from Fraud: Don't send money to someone you don't know. Find out how to help safeguard your transactions and your personal information to avoid online fraud.
This message is mandatory, if you do not complete it in less then 24 hours, your account may get deactivate.
Copyright 1999-2013 PayPal. All rights reserved.
This email message was not sent by PayPal and you should not follow the instructions in it. The email message appears to have been sent from an email account at the website "incorrect.se" (no-reply.pay-pal @incorrect.se). But, you can never rely on an email address because it can be spoofed or tampered with.
The link in the email message, which appears to go to the PayPal website, actually goes to the PayPal phishing or fake web page below, when clicked on:
http://www.castrolaboreiro.com/pp/paypal.com/us/cgi-bin /webscr.htm?cmd=_login-run
Do not enter your user name and password on this website. And, never click on a link to sign into any of your online accounts. Always go directly to your online accounts, by typing the website address in your web browser address bar and clicking the “Go” button or pressing the "Enter" key on your keyboard.
For example:
If you want to sign into your PayPal account, type "www.paypal.com" in your web browser address bar and click the "Go" button or press the "Enter" key on your keyboard. Once you are on the website: "www.paypal.com", sign in from there or navigate to the sign-in page.
Always ensure that your web browser address bar looks like the image below when you are visiting www.paypal.com website:
If you have already entered your PayPal user name and password on this website, please change your PayPal password right now.
Here are instructions for changing your PayPal password
- Log in to your PayPal account.
- Click My Account at the top of the page.
- Click Profile at the top of the page.
- Click Change beside Password/Security questions.
- Select Password.
- Click Edit. You may be required to confirm your account information.
- Enter your current password and your new password.
- Click Save