Thread: ALIPAC Paypal scam? Or trying to auto-debit subscription?

Greetings,

I received an email a few days ago (pasted below, with name X'ed out), which appeared to be from Paypal, saying my "subscription to ALI-PAC Yearly Membership" of $25.00 USD had failed due to lack of a "back-up funding source for your instant transfer" and would be re-attempted on September 30th.

Needless to say, this set off MAJOR ALARMS in my mental financial security department.

One of two things is going on here:

1.) This is a phishing scam directed at ALI-PAC members to try and get them to click on the link in the email and log in to a phony Paypal site thus giving up their Paypal login information to hackers (I removed part of the URL in question below so no one will do just that, if in fact that is the case)

or...

2.) ALI-PAC is trying to auto-debit yearly subscriptions of $25.00 USD to the Paypal accounts of people who have donated to ALI-PAC through Paypal. I am unable to find any record of me having given ALI-PAC permission to do this. I didn't even have an account on ALI-PAC until just now, created one just to post this message. Yes, I did donate to ALI-PAC some time ago, probably via Paypal. If ALI-PAC is in fact trying to auto-debit the Paypal accounts of former donaters per a "subcription" justification, it is *completely* unacceptable and NEEDS TO STOP NOW.

My hunch is it is in fact #1, a Paypal phishing attempt, however a particularly well formed one (I am used to seeing Paypal phishing scams; they are usually easy to identify).

I would appreciate it if someone there at ALI-PAC would clarify this matter for me.

Details of apparent Paypal email below:

Dear XXXX,

The payment for your subscription to ALI-PAC Yearly Membership failed because you do not currently have a back-up funding source for your instant transfer payment.Americans for Legal Immigration has been notified of this failed payment.

We will try to make payment again on Sep 30, 2006.

To correct this problem, you must update your funding source to be an eCheck or a credit card.

Please change the funding source for this Subscription by clicking this link and following the steps below:
https://www.paypal.com/us/cgi-binXXXXXX ... @alipac.us

1. Click the link above to go to log in and go to your Subscription Details.
2. Under 'Subscription Funding Source' choose a credit card or eCheck funding source from one of the drop-downs.

If there are no other funding sources available, add a new credit card:

3. Click on the 'Profile' subtab
4. Choose the 'Credit Cards' link from the Financial Information column
5. Click 'Add'
6. Follow the on-screen instructions to add a new credit card to your PayPal account

After adding a new credit card, follow steps 1 and 2 above to change your subscription funding source.



-----------------------------------
Subscription Details
-----------------------------------


Amount: $25.00 USD
Date of payment failure: Sep 27, 2006
Date of next payment attempt: Sep 30, 2006
Subscription Name: ALI-PAC Yearly Membership
Subscription Number: S-1VE55396WK229810K
Item Number: ALIYEAR

New member salsanchips posted it in the General Discussion and I moved it in here for review. Sorry I shouild have identified myself, first time doing this for me per your useful instructions My notes are at the top of the post.

I have notified Daryl Jurbala and asked him to take a look at this and let us know. He should respond soon.

Thank you for bringing it in Lori.

W

I don't know if this has an value here but might help me {it's driving me nuts}

I have TMobile phones and ALWAYS pay by business check
Now I've a slew of emails from PAYPAL sales saying that a payment was made to TMobile??? I don't have paypal acct.

Is there a major scam in action?

Scam!

I have several mail accounts and I've received PayPal notices in all of them. Only one of my mail accouts is registered with PP but I'm getting notices in all my boxes. They are asking for payments from people I don't do business with. I've been deleteing the e-mails because it's a scam. I'm sure it's set up to steal your Pay Pal account info or sucker you into sending them money.

I'm sure someone searched the net and found out Alipac accepts PayPal and started serching for people to trick into paying them. I doubt that "real members" will ever see this notice but people that know nothing about Alipac may come looking for their lost money.

SalsanChips may have been trying to give us a heads up or smear us on our board.

Dixie

Hey folks,

Now before we look into this.. everyone should realize that paypal spam scams are the most common scams on the net. I receive BS paypal notices everyday that I ignore and delete and report.

The chances are highest that this salsa user just got some paypal spam or made a mistake with their account or is on the attack.

We will look into this but do a little online research about paypal scams and paypal spam before jumping the gun.

W

Originally Posted by ALIPAC

I have notified Daryl Jurbala and asked him to take a look at this and let us know. He should respond soon.

Thank you for bringing it in Lori.

W

This has nothing to do with ALIPAC. If anyone feels that they have been the target of any scam involving PayPal, email security@paypal.com and handle it with them. There is absolutely nothing we can do, as PayPal won't talk to anyone other than the account holder in regards to the details of their account.

I think this should go out in the open now that we know what's going on.

Sure thing. Move it out into the open because we need our supporters to know that Paypal is safe to use and we do need people to sign up for monthly and yearly contributions through Paypal.

W

I got this back from PayPal yesterday. spoof@paypal.com


Thank you for contacting PayPal about a fraudulent (spoof) email or Web
site. We appreciate you bringing this suspicious email to our attention.

We can confirm that the email you received was not sent by PayPal. Any
website which may be linked to this email is not authorized or used by
PayPal.

Our fraud prevention team is working to disable any website linked to
this email. In the meantime, please do not enter any information into
this website. If you have already done so, you should immediately log
into your PayPal account and change your password, as well as your
security questions and answers. We also recommend that you contact your
bank and credit card company immediately.

Please follow the instructions below to report an unauthorized
transaction associated with your PayPal account:

If you are able to log into your PayPal account:

1. Log in to your account at https://www.paypal.com
2. Select the "Resolution Center" subtab.
3. Click "Open a dispute."
4. Select "Unauthorized transaction," then click "Continue."
5. Enter or select the transaction ID for the transaction you would like
to dispute, then click "Continue."
6. Complete the report for Unauthorized Use on a PayPal Account, then
click "Continue."
7. Confirm that the claim is correct, then click "Submit."

If you cannot log in to your account, follow the instructions below to
report an unauthorized transaction associated with your PayPal account:

1. Go to https://www.paypal.com/
2. Click on the "Security Center" link located at the bottom of any
page.
3. Under the "Report a Problem" column, click on "Unauthorized
Transaction."
4. Click "Continue" under "Unable to log in?"
5. Confirm that the transaction in question is unauthorized then click
"Continue."
6. Complete the report for Unauthorized Use on a PayPal Account, then
click "Preview."
7. Confirm that the claim is correct, then click "Submit."
8. Confirm your account ownership by entering the financial information
requested, then click "Continue."

Lastly, we recommend taking a few steps to protect yourself from
identity theft:

1. Download the SafetyBar, a toolbar for Outlook and Outlook Express,
which identifies known spoof emails.
2. Get eBay Toolbar with Account Guard which warns you when you're on a
potentially fraudulent (spoof) Web site.
3. Sign up for Equifax Credit Alerts for PayPal Users, a program that
provides an early warning detection system in the event of identity
theft. Find out more by visiting the PayPal Identity Protection Center
at www.paypal.com/idprotection.
4. Frequently monitor your PayPal account for suspicious activity.

For additional tips please visit the PayPal Security Center at
https://www.paypal.com/security.

Thank you again for sending us your report. We appreciate your efforts
to keep PayPal safe.

Sincerely,

PayPal
PayPal Account Review Department
__________________________________________________ ____________

Important: PayPal and its representatives will NEVER ask you to reveal
your password. There are NO EXCEPTIONS to this policy. If anyone
claiming to work for PayPal asks for your password under any
circumstances, by email or by phone, please refuse and immediately
contact us via our secure webform online.


************************************************** **********************
This
email is sent to you by the contracting entity to your User Agreement,
either PayPal Inc or PayPal (Europe) Limited. PayPal (Europe) Limited is
authorized and regulated by the Financial Services Authority in the UK
as an electronic money institution.

************************************************** *********************