• In case most of you have not noticed, I made changes to the donation amounts as well as the durations for all of the paid membership levels. Things are winding down here, and this seems to be the most prudent way to deal with the "end of life" period of this site.

    Contributor level members - $10 per 30 days
    Sponsors - Eliminated
    Benefactor level members - $25 per 30 days
    Endowment level members - $50 per 30 days

    Account Upgrades Page
  • Responding to email notices you receive.
    **************************************************
    In short, DON'T! Email notices are to ONLY alert you of a reply to your private message or your ad on this site. Replying to the email just wastes your time as it goes NOWHERE, and probably pisses off the person you thought you replied to when they think you just ignored them. So instead of complaining to me about your messages not being replied to from this site via email, please READ that email notice that plainly states what you need to do in order to reply to who you are trying to converse with.

--WormMan-- Paypal Account Fraud (Inquiry)

G

geckoluvr

New member
Joined
Nov 28, 2007
Messages
7
Reaction score
0
Points
0
Age
46
Location
British Columbia
I made a purchase from Worm Man Worm Farm (www.wormman.com) on November 18, 2007. I have not yet received anything from them as of today.

on 12/1/07 I requested a Refund because they told me the item was "backordered" and that it would have been shipped no later than the 30th. (Please keep in mind, on their website it guarantees next day delivery if purchased before 9:00 am).

Basically... after all is said and done, I received an email this morning from "paypal" saying my account had been refunded. Well, the account they sent it to was not even my paypal account, and the link was not a real paypal link. The email that he sent me, that was suppose to look like paypal, was fraudulent.

According to Paypal, they were "phishing" for my account information, and I have confirmed this has possibly occurred with several other accounts through paypal as of this morning.

If you have recently made a purchase through Worm Man, please be careful and check you account for unauthorized transactions, change your password, change your email password, and notify paypal immediately if you see anything suspicious.

I hope this helps prevent this from happening to anyone else in the future.
 
Sorry To hear about that bad transaction Laura. Could you please post all emails regarding this transaction. Including the one with the phishing link. It may be helpful for someone else...
 
Laura, did the "paypal" email say it was a refund from Wormman?

There are a lot of phishing emails that try to fake people into thinking it's PayPal, and often use "Your payment has been refunded" or "There is a problem with your account". So, unless the email you're talking about specifically says that it's for a refund related to Wormman, it may just be a random phishing attempt and may not be connected to Wormman.

But, if you post the emails, that would help clarify.
 
I received an email this morning from "paypal" saying my account had been refunded. Well, the account they sent it to was not even my paypal account, and the link was not a real paypal link. The email that he sent me, that was suppose to look like paypal, was fraudulent.
Click to expand...

Did it appear to come from paypal, or from wormman? Big difference.

As has already been said, there are tons of these phising scams out there, and they end up in random email boxes all of the time, figuring that there are probably enough people out there that use paypal that they will get some to fall for them.....they usually either tell you that you have to verify your account info or it is going to be frozen, or that you have received a refund. You just happened to be waiting for a refund.

If this is the case, and it was not a note sent directly from wormman, I think you really jumped the gun on this one. Not that wormman doesn't have a bit of a shady reputation to begin with, but accusing someone of paypal fraud in the title of the thread is pretty harsh, unless you're positive that's what happened.
 
I'm very positive about what happened. I spoke with a paypal representitive that told me the email was fraudulent, and that the person who sent the email to be "reproduced the paypal site to access my personal information".

Here is the email I was sent from [email protected] (posing as Paypal... but it looks like he forgot to cover that part up)... I will not be including my private information from the email, but it was addressed to my email address, NOT my name, which paypal said they always do... second, it required me to "accept the payment", which paypal also does not do. and on top of this, he added an additional email account to my paypal account that I did not authorize. ...

From: [email protected]
Subject: R&K TRADING COMPANY has just sent you $**** USD with PayPal
Date: December 6, 2007 10:13:06 AM PST
To: **insert my email address***

Dear ****insert my email address****,

R&K TRADING COMPANY just sent you $**** USD with PayPal.

Click https://www.paypal.com/us/links/uni/em=**insert my email address*** to claim your payment.

-----------------------------------
Don't have a PayPal account?
-----------------------------------

Sign-up is fast and free. With PayPal, you can pay online without sharing your financial information.

You can also:
- Send money to or request money from anyone with an email address in 190 countries and regions.
- Shop at millions of online stores.


-----------------------------------
Already have a PayPal account?
-----------------------------------

R&K TRADING COMPANY sent this payment to an address that isn't linked to your PayPal account. Log in to PayPal to add this email address to your account and receive this payment. (THIS IS WHERE THE UNAUTHORIZED EMAIL ADDITION COMES IN!!!! I DID NOT ADD THIS SO CALLED "UNLINKED EMAIL ACCOUNT" TO MY CURRENT PAYPAL)

Sincerely,
PayPal





----------------------------------------------------------------

PayPal Email ID PP291



Here, he is posing as Paypal.

Also, this email was sent to me at 10:13 am, the unauthorized new email address was added to my account at 10:32 am.
Paypal emails all come from [email protected], this was sent directly from his personal email. This detail showed up thanks to my email account filtering, the "cover up" address was "[email protected]"

and also, everytime I clicked "contact us" from my paypal account after this new address was added, it would come up with a prompt that said "1.1.1 Header=Gecko 1.1.1 cannot find server." Suspicious??? That is what tipped Paypal off the most, the fake site, and the fake email... ugh.. thats just horrible.

This inquiry is by all mean completely legitimate. I'm just trying to help anyone else who might find themselves in a similar situation, again, I hope I've helped some people out. :)
 
geckoluvr said:
I'm very positive about what happened. I spoke with a paypal representitive that told me the email was fraudulent, and that the person who sent the email to be "reproduced the paypal site to access my personal information".

Here is the email I was sent from [email protected] (posing as Paypal... but it looks like he forgot to cover that part up)... I will not be including my private information from the email, but it was addressed to my email address, NOT my name, which paypal said they always do... second, it required me to "accept the payment", which paypal also does not do. and on top of this, he added an additional email account to my paypal account that I did not authorize. ...

From: [email protected]
Subject: R&K TRADING COMPANY has just sent you $**** USD with PayPal
Date: December 6, 2007 10:13:06 AM PST
To: **insert my email address***

Dear ****insert my email address****,

R&K TRADING COMPANY just sent you $**** USD with PayPal.

Click https://www.paypal.com/us/links/uni/em=**insert my email address*** to claim your payment.

-----------------------------------
Don't have a PayPal account?
-----------------------------------

Sign-up is fast and free. With PayPal, you can pay online without sharing your financial information.

You can also:
- Send money to or request money from anyone with an email address in 190 countries and regions.
- Shop at millions of online stores.


-----------------------------------
Already have a PayPal account?
-----------------------------------

R&K TRADING COMPANY sent this payment to an address that isn't linked to your PayPal account. Log in to PayPal to add this email address to your account and receive this payment. (THIS IS WHERE THE UNAUTHORIZED EMAIL ADDITION COMES IN!!!! I DID NOT ADD THIS SO CALLED "UNLINKED EMAIL ACCOUNT" TO MY CURRENT PAYPAL)

Sincerely,
PayPal





----------------------------------------------------------------

PayPal Email ID PP291



Here, he is posing as Paypal.

Also, this email was sent to me at 10:13 am, the unauthorized new email address was added to my account at 10:32 am.
Paypal emails all come from [email protected], this was sent directly from his personal email. This detail showed up thanks to my email account filtering, the "cover up" address was "[email protected]"

and also, everytime I clicked "contact us" from my paypal account after this new address was added, it would come up with a prompt that said "1.1.1 Header=Gecko 1.1.1 cannot find server." Suspicious??? That is what tipped Paypal off the most, the fake site, and the fake email... ugh.. thats just horrible.

This inquiry is by all mean completely legitimate. I'm just trying to help anyone else who might find themselves in a similar situation, again, I hope I've helped some people out. :)
Click to expand...

I'm sorry, could you explain how the information posted above is connected to wormman? Is R&K TRADING COMPANY or the email address [email protected] associated with that site?
 
ScreenShot001.jpg
 
Well well....this certainly is NOT your average phishing email then is it?

What I'd like to know is how the heck could he add an address to your paypal account without having your password and such?

Is Paypal taking steps to do something to this guy?
 
What I'd like to know is how the heck could he add an address to your paypal account without having your password and such?
Click to expand...
He/they can't, but they want you to think it has happened so that you will log into your paypal account using the link they sent.
 
WOW-this is unbelievable
:eek:
I know that most people (including myself) have stopped using this company years ago because of their unreliability and inaccessibility but for them to do something like this actually shocks me !!

Sandy
 
Casey Hulse said:
He/they can't, but they want you to think it has happened so that you will log into your paypal account using the link they sent.
Click to expand...
Exactly. More than likely this was an HTML email and the link took you somewhere other than https://www.paypal.com/us/links/uni/em= **insert my email address***. Can you post the HTML source for the email?
 
Wow.......Paypal really Sucks....But so does....

the Wormman........It sounds like fraud......But probably from Paypals end........
"Timberline" has served me well for almost 7 years...Fresh bugs or replaced immediately....
Paypal made it a whole 6 months.......HaHa.......My account was charged twice for stuff I never ordered.........This was 02 when they had employees stealing card numbers...........I'll never use them again.......Nor ever Wormman........Someone should buy out his Co. change the name and start
a new show....
 
LadyGecko said:
WOW-this is unbelievable
:eek:
I know that most people (including myself) have stopped using this company years ago because of their unreliability and inaccessibility but for them to do something like this actually shocks me !!

Sandy
Click to expand...
All right, everyone needs to take a step back and calm down for a second. I would be very surprised if wormman had anything to do with this. I'll say right now that they more than likely did not.

Have you all, that are starting to jump on wormman, forgotten that phishers, and others like them FAKE the sent from address? They do not use an email that can be traced back to them.

I receive notices nearly everyday from email servers telling me about some undeliverable email. I get those because some spammer or scammer is using my business email addresses to spoof the return address on the spam emails being sent. If one of you received something like this with one of my business email addresses in it, would you really think it was me trying this?

The OP needs to post the entire header information. This way the IP address the email came from can be seen. That'll show where the emal came from and it most likely won't be from within the US.
 
DThomas said:
All right, everyone needs to take a step back and calm down for a second. I would be very surprised if wormman had anything to do with this. I'll say right now that they more than likely did not.

Have you all, that are starting to jump on wormman, forgotten that phishers, and others like them FAKE the sent from address? They do not use an email that can be traced back to them.

I receive notices nearly everyday from email servers telling me about some undeliverable email. I get those because some spammer or scammer is using my business email addresses to spoof the return address on the spam emails being sent. If one of you received something like this with one of my business email addresses in it, would you really think it was me trying this?

The OP needs to post the entire header information. This way the IP address the email came from can be seen. That'll show where the emal came from and it most likely won't be from within the US.
Click to expand...

Question-
Dennis, I understand you can spoof the email address. I'm curious to know how they might know to spoof the email address of someone you are already waiting payment from?
 
Dennis Hultman said:
Question-
Dennis, I understand you can spoof the email address. I'm curious to know how they might know to spoof the email address of someone you are already waiting payment from?
Click to expand...
He maybe infected with a trojan that is harvesting email addresses from him. Or, which I think is more likely, they just got luckly and got it to someone that was waiting for a refund. That email wasn't advising her of a refund. That email is the generic, form email that PayPal sends out when ever someone just sends money. Whenever you log into Paypal and click the link "Send Money" and put in an email address to send it to, that is the email that is generated. Anyone can copy and paste that and make a templete out of it to send out millions of bogus emails.

The full headers of the email the OP received will probably show many more email addresses this went to. This is an old and very common scam running around the internet. PayPal's security center has an article on this type of thing.
 
It is VERY common for hackers to hack into a site and then use the site as a base of operations sending out phishing notices, spam, trojans, and virus programs. I have had security departments contact me via phone because phishing emails were coming from my own servers. Not sure how the hackers got in, but I deleted the crap and tried to plug the holes. What is kind of scary about this is that perhaps they are getting even smarter and directly targeting companies in order to make the phish look legitimate.

I get several PayPal and Ebay phishing emails on a daily basis. If you simply hover the mouse pointer over the link they provide, it will normally show the bogus URL you are being sent to. In any event, if in doubt, simply send the questionable email to [email protected] and have them check it out.

Personally, I SERIOUSLY doubt that WormMan (Ken) had anything to do with this.
 
Back
Top