In order to receive the money in your PayPal account in exchange for the goods you are sending the recipient, PayPal requires you to fill out the 'Request Money' form so that you may "receive secure, instant payments." The amount you are 'requesting' matches the amount the sender is 'sending,' and voila! Perfect, right?
Recently, I received a very 'authentic' PayPal email informing me that my 'request to receive payment' was satisfied. The subject of the email even said so: "Instant payment Notification!" And it was from 'service@paypal.com .'
I should've realized something was up when one of the words was not capitalized. I should've also remembered the earlier emails where the 'buyer' was using words like "cos" instead of 'because.' Another hint was one of her original emails where she said she'd like to have this item sent to her fiance, "I am actually buying it for her birthday. I am out of town. I will pay through paypal." Her fiance is a she? Heck, it's 2009! Just because gay couples can't get married in most states, why should I care how she chooses to address her lady?
Next clue: Her first email contained only a few (generic) words, "I am interested in buying." Buying what? That was definitely a 'bot.' Especially the next email from her when she agreed to the price, without any haggling, or asking questions, or wanting to see pictures. She even would pay the shipping charges. Great! She insisted I send the package 'USPS Express Mail International.' She knew exactly how much it would cost too. She had done her homework. Obviously, she was an expert PayPal member. And she really wanted this item bad. But why 'International'? It was only going to Arizona. I mean I know John McCain is from there, but that doesn't make it a 'foreign' land!
Finally, I get the email I was looking for. PayPal clearly states that I should be receiving an email from them confirming that the funds were deposited. And I did. The email was from 'service@paypal.com' and it asked me to notify them of the tracking number. I am sure that was so that the 'scam artist' would reroute the item to the actual address, rather than the fake one I was overnighting it to as I would come to find out.
I can't believe the USPS would allow just about anyone to track the shipment of any item just because you happen to have the tracking number. Weak!
Anyway, when I checked my PayPal account, everything seemed OK. There was my invoice and her name and email address (based on my 'Request Money' submission). So I should relax, right?
Actually, NO! Despite everyone saying do not click on the links in emails, I did! After all, I wanted to submit the tracking number so I can withdraw the funds (another clue: PayPal does NOT have a 'pending' status which clears after the item's shipment is confirmed).
And I am glad I did. Because when I was trying to submit the tracking number I was having a problem following the instructions. One of the sections I was supposed to fill out was missing. So I decided I should email Customer Service.
Although I clicked on the link of the 'fake' email, I DEFINITELY WAS on MY OWN PayPal account. I made sure of that by checking around, etc. And from that site, I clicked on Customer Service and explained to them that their 'instructions' were faulty. And this is when it all fell apart for the scammer(s).
I received yet another email from 'service@paypal.com' but this one was the 'real' deal. They were asking me to give them a call. On that phone call I was told that the earlier email I received from 'service@paypal.com' was fraudulent!!!
Nothing they can do PayPal said. They suggested that I call USPS and try to reroute the package back. Even though it was an overnight delivery. My quick thinking averted a bigger disaster. And that's how it got resolved. A few phone calls to the Consumer Affairs Department, a visit to the local Post Office, filling out a Form-1509, and they were able to 'stop' delivery of the overnight package. Of course, I'll believe it when I see it. Waiting to receive the package minus the shipping charges already paid (and lost) of course. But it could have been worse.
Obviously, what made this all work for the spammer is that the 'item' in question was not a high-ticket item. Otherwise I would've done more due diligence. But the scammers don't care about how valuable or invaluable violating you is. If they do this all day long to unsuspecting people on PayPal, I am sure it made it worthwhile for them. In fact, the Post Office in Arizona (where the item was being shipped) confirmed that this 'delivery address' has been receiving multiple packages on a daily basis!!! And no one became suspicious?
Since this involves 'mail fraud' across state lines, it's a Federal crime. And the investigation is ongoing. But where does PayPal stand on this? Can their stance be anything other than 'you're on your own - we accept no responsibility -check our terms and rules that you agreed to when you signed up (the 50 page document that no one bothers to read)'??? Asking us to WAIVE OUR RIGHTS???!!! PayPal touts its Seller Protection Policy as "excellent", but PayPal Sucks says it's a farce!
By the way, the 'fake' email was actually from 'service@paypal .' and not from 'service@paypal.' Can you tell the subtle difference?
Upon closer examination, if you are one to check the html code behind everything, another clue that was missed popped up; the 'name' of the sender had a 'live.com' account that rerouted to paypal.com. Just like 'Hotmail' once used to do, another fine mess MSN keeps getting me into!!!
Down with Microsoft! Straighten out and do something about your spams, viruses, and easy hacking for these Internet 'terrorists'!!!
