A few days ago, I received a suspicious email. The addressee on the email is simply "PayPal" (not service@paypal.com like my other messages). The
message (with the header "Download the Attached File!") reads:

Important Information Regarding Your PayPal Account.

You have added terryhacker@yahoo.com as a new email address for your PayPal account.

If you did not authorize this change or if you need assistance
with your account,We have attached a secure form with this email

PLEASE DOWNLOAD THE ATTACHMENT OR YOU CAN OPEN IT IN YOUR BROWSER AND COMPLETE THE REQUIRED FORM FOR YOU OWN SAFETY AND WELL BEING OF THE ACCOUNT AND YOUR FUNDS .

Thanks ,
PayPal Team .


I do not know anyone named "terryhacker" and have not authorized any changes to my account. The attachment (named
"ResolutionCentre.html") asks me for personal information. I forwarded a
copy to PayPal (using their official address in my Address Book) twice but
still have not received a response. I do not believe this is a genuine request from PayPal because when you open the attachment, a screen titled Profile Update comes up and asks for personal information (and a "phish" popup box appears in the corner of the screen). The box says:
"! Suspicious website
This might be a phisihing website."
I think someone is trying to hack into my account. I don't know anyone named "Terry Hacker." And I'm sure not giving any personal information that I don't have to. PayPal already has all the info that they require from me. Can someone confirm whether this is a valid or bogus request? Has anyone else received a similar suspicious message from someone posing as PayPal?

it sounds bogus. Forward it to: spoof@paypal.com

Done. Thanks!

If the E-mail addresses you as (Dear) Paypal Member, Paypal Customer, Paypal Account Holder, etc... and not by your real first and last name then it's definitely bogus.

The others are correct. Paypal will NEVER ask you for your name and other info via emails.

Additionally, their site is https://www.paypal.com/ (verified by VeriSign, Inc (http://www.verisign.com/) if you place your cursor over the address at Paypal's site) - with the "S" in the http part of the address. That means their site is a secure site - if you get a phishing email that contains a web address in their email, it will NOT have a https in there.

Also... They actually pay attention to how their emails are formatted. That email is full of errors. SCAM.

Thanks to all of you for your input. I will delete the message from my Inbox.

you should NEVER open any attachments in emails, unless it is from someone that you KNOW and that you are EXPECTING.

no legitimate company will ever ask you to open an attachment to send THEM information, usually they will tell you to log in to their website or ask you to call them.

I would make sure that your antivirus is up-to-date and do a full scan.