Rethink Commerce Blog

Phishing Attempt PayPal / Avangate BV

Posted on January 19th, 2010 by

We identified via our Support center that some people were asking about an unknown “charge” in their Paypal from Avangate. It seems they received a deceitful email trying to trick them into giving away their PayPal information.

The email came from a yahoo.com address acting as the “Fraud Department” of PayPal and contained a false notification that Avangate BV charged their accounts and a link “Click HERE TO REFUND“, leading them to a forged to look like PayPal website.

Phishing Attempt Paypal / Avangate BV

Phishing Attempt PayPal / Avangate BV

The fake website has already been banned (reported for web forgery).

When you receive PayPal phishing attempt you can report it to spoof@paypal.com and also delete it from your inbox.

To make sure you are never the victim of a phishing attack, always check the URL and the security elements like HTTPS before entering login information to any website.

If you want to further prepare for coping with phishing emails, we recommend reading on the PayPal website about ways to recognize fake emails.

Please comment below if you need more details or advice on this issue.

Vote:
Phishing Attempt PayPal / Avangate BV
0 votes

Cristian Badea

Chief Information Officer

Please note: Comment moderation is enabled and may delay your comment. There is no need to resubmit your comment.

Comments (23)

  • Tweets that mention Phishing Attempt Paypal / Avangate BV | Avangate Blog - Software Sales Tips | Software Business Blog -- Topsy.com says: January 19th, 2010 at 9:14 pm

    [...] This post was mentioned on Twitter by Avangate , Roxana Patrichi and Rick Davies, Cristian Badea. Cristian Badea said: RT @avangate New post: Phishing Attempt Paypal / Avangate BV http://bit.ly/5AKbVt [...]

  • jen says: January 21st, 2010 at 11:02 pm

    I received that same phishing email this morning, it was the same except the amount was $497.99. It really freaked me out because I wasn’t able to see the senders email from my iPhone. I immediately got on my computer and logged into my paypal account. Then I googled Avangate BV and found this. Please remind everyone not to click the link in the email but to go directly to paypal.com if they want to check their account. This goes for any email you receive regarding your paypal account!!!

  • eCommerce Provider Avangate Announces Strategic Plan for 2010 | Big Dads Software says: January 26th, 2010 at 3:50 am

    [...] Phishing Attempt PayPal / Avangate BV [...]

  • Travis Jones says: February 8th, 2010 at 2:26 pm

    The same thing happened to me but I havent read an email. Instead, whoever did this ran my account up to 300+ dollars! I am furious! How can this get fixed so everyone can sleep at night?

  • Roxana says: February 8th, 2010 at 8:34 pm

    @Travis Jones first of all, change the password of your email address, just in case, even if you didn’t click on a fake link in an email. Then, to get your money back, contact your bank (or PayPal) and tell them what happened.

    Unfortunately, phishing attempts will probably always happen, that is why it’s important to learn how to prevent becoming a victim of one. Do try browsing through the generous documentation PayPal offers on this matter: https://www.paypal.com/cgi-bin/webscr?cmd=xpt/Marketing/securitycenter/general/Index-outside and chose the best way to stay protected.

    Basically, the bigger part of the fix is in your hands, if you follow a few simple guidelines, chances of future unauthorized access to your account go really down:
    - never ever share your account private details with anybody;
    - before entering information about your Paypal / bank account on the web, double check the URL, make sure it is a https one, not a simple http;
    - double check the security certificate of the page asking for your account details.

  • Anon says: May 13th, 2010 at 11:07 pm

    I just got a phishing attempt from PayPal (don’t worry, not Avangate related but I was doing a search and came across your blog).

    Latest one seems to attach a file asking you to click on it to verify a “discrepancy” in your PayPal account..

    Looks like this:

    From: “PayPal”
    Subject: Please Submit Your Refund Payment
    Dear PayPal Customer,

    During our regularly scheduled account maintenance and verification procedure we have detected a
    slight error in your PayPal online account.

    This might be due to the following reasons:

    1. A recent change in your personal information (ie. change of address, email address)

    2. An inability to accurately verify your selected option of payment due to an internal
    error within our systems.

    Please fill in all the details that are required to complete this verification process.

    To do this we have attached a form to this email. Please download the form and follow the
    instructions on your screen. NOTE: The form needs to be opened in a modern browser which has
    javascript enabled (ex: Internet Explorer 7, Firefox 3, Safari 3, Opera 9)

    Please understand that this is a security measure intended to
    help protect you and your account. We apologize for any inconvenience.

    If you choose to ignore our request, you leave us no choice but
    to temporary suspend your account.

    Sincerely,
    PayPal Account Review Department.

    Please do not reply to this e-mail. Mail sent to this address cannot be answered.
    For assistance, log in to your PayPal account and choose the “Help” link in the footer of any page.

    Content-Disposition: attachment filename=”Verify_Form.html”

    Looks like (by reading the full header) the one I got actually was through a hijacked yahoo account from France.

    Return-Path:
    Received: from clevelandplayhouse.com ([209.187.80.219])
    by mx.google.com with ESMTP id 27si949350qyk.90.2010.05.13.05.18.57;
    Thu, 13 May 2010 05:19:07 -0700 (PDT)
    Received-SPF: neutral (google.com: 209.187.80.219 is neither permitted nor denied by best guess record for domain of srvcs@ppal.com) client-ip=209.187.80.219;
    Authentication-Results: mx.google.com; spf=neutral (google.com: 209.187.80.219 is neither permitted nor denied by best guess record for domain of srvcs@ppal.com) smtp.mail=srvcs@ppal.com
    Received: from [208.104.18.27] by clevelandplayhouse.com [192.168.0.231] with SmartMax MailMax for angierock2001(@)yahoo.fr; Thu, 13 May 2010 08:23:07 -0400
    Return-Path:
    X-SmartMax-AuthUser: merlin

  • free paypal says: January 15th, 2011 at 6:09 pm

    I have had many of these emails from paypal and my bank etc. Best thing is to log on when you want to not when someone asks you to, stick to that and visit sites like this directly and you’ll have no problems!

  • Guest says: December 29th, 2011 at 1:00 am

    I just made a blog post showing how to verify your PayPal without having a bank account, you can see it at http://whosthatguru.com – I just thought it could help some of the people who read your stuff so why not share it

  • AMTRA says: June 19th, 2012 at 2:11 pm

    does avangate send an email to buyers (via paypal) for proof of identity and proof of billing to be sent to them via email or fax? i need to know the reply asap. i received an email from avangate bv today asking me to do this before my order can be proccessed! how weird!

  • Cristian Badea says: July 12th, 2012 at 12:38 pm

    Hello,

    Avangate provides eCommerce solutions designed for enhancing software companies’ sales processes. Since Avangate is the Merchant of Record for transactions taking place in our payment terminals, one of our main goals is maintaining fraud levels at a minimum – protecting Avangate and our Partnered Vendors`businesses – by employing both automated and manual screening processes for every transaction. When certain filters are triggered, some orders may be considered as presenting a higher risk, and for acceptance additional information may be required from the customer in order to validate the transaction. Requests for additional information are indeed sent by email and address the concerns which lead to the flagging of the order. Due to this fact, the information requested is not standard for each case -> varies with the reason of suspicion. Any documentation can be submitted either through a SSL encrypted connection at an upload page, or by fax. Such documentation received is used strictly for the purpose of evaluating orders, and is not stored in any physical environment. Such requets for information also contain our company’s contact information (24/7 email and phone support), in case the customer wishes to provide feedback regarding the order.

    For any further information or questions on the process, please reach out to Avangate at support@avangate.com

    Best regards

  • PAUL WILLINGHAM says: July 2nd, 2013 at 12:16 am

    My Pay Pal is being hit twice a month from AVANGATE BV. What is this?

  • Irina Mihaila says: July 8th, 2013 at 10:19 am

    Hello,

    Avangate manages the eStores of thousands of Software and SaaS Companies worldwide, providing secure online payments to all their software buyers.
    Our support team has received the email you sent us and replied with detailed information about the products which have been purchased through yourPayPal account.
    Should you have further inquiries about the orders, the complete contact information for our Shopper Support is available here:

    http://www.avangate.com/shopper-support/

    Best regards,
    The Avangate Team

  • Robert Wilkinson says: August 12th, 2013 at 10:14 am

    Do your company have any affiliates etc with a company called Neurosoft corp PC Doc Pro???as they have taken money from my account without Autherisation your Swift reply is welcomed thank you

  • Irina Mihaila says: August 13th, 2013 at 12:17 pm

    Hello Robert,

    We do not have any records of this company being affiliated with Avangate.
    However, if you have have any reason to believe that the unauthorized charge you reported is in any way connected with Avangate, please get in touch with our Support Team (available 24/7) with a complete description of the situation, so we may further investigate the matter.
    At the link below you can find the necessary contact information:

    http://www.avangate.com/shopper-support/

    Best regards,
    The Avangate Team

  • George Samuels says: August 31st, 2013 at 6:26 am

    Avangate failed to provide me with what I purchased. What I received has failed. I didn’t get a contact for services. Being a retired Attorney I plan to sue for damages.

  • Irina Mihaila says: September 2nd, 2013 at 5:52 pm

    Dear George,

    We have identified one order from you in our system corresponding to the purchase of a computer software, which was delivered electronically in a form of a download link and license key. Additionally, a CD was ordered and mailed to the address supplied at the time of the order, and considering we have not received any feedback indicating otherwise, we considered this to be delivered until now.
    If you require more detailed information about this order, please feel free to contact our Support Team through one of the channels listed below (phone and email available):

    http://www.avangate.com/shopper-support/

    Best regards,
    The Avangate Team

  • Gay Dickenson says: September 11th, 2013 at 9:29 pm

    So …what to do if I got screwed out of 39.98 through these creeps!! this was back in May when I was changing my address information!!
    Thanks!

  • Patti Davison says: September 18th, 2013 at 10:04 am

    I have been getting emails saying I am on an Auto-renew account, which I DO NOT WANT TO HAPPEN. I called the customer svc number and was told I cannot fix this by calling this, the only number available to call. Also, I am not able to access my so-called account. Please respond, and immediately cancel any accounts I may have with you and especially any auto-renewal of anything! Thank you.

  • Renatto says: September 20th, 2013 at 10:57 am

    I got this notice and never clicked on it and yet got charged for some thing I never agreed to. I checked my bank account and found it was taken out. I contested the charge and got my money back for Pay Pal. Toold a week. Very annoying and if they didn’t I would of got in back thru my bank. But the bank would of told me to try to get it back form Pay Pal first and I did. Now I just got to call my bank and get the $28 over draw fee back. Most would not notice $29 missing but I live on S.S.I. Disability as I am disabled and unable to work. Every little penny helps and I got someone stealing what little I got all the time. How did they get my Pay Pal information anyways. Someone gave it to them and I think that was IObits software as they are linked to them in using there services. But I never agreed to get changed without notice. And never would of agree to be so. I have to little money as it is and everyone even the Government is conspiring to take it away form me though I worked hard to have it there some day when I needed it. Nice try… but I have done this… been there before and know how to get my money back. :P

  • Irina Mihaila says: September 20th, 2013 at 1:34 pm

    Hello Patti,

    Our Support team has located a yearly subscription for two software products, which was purchased by you last year in September. The auto-renew option for this subscription has now been turned off, which means you will not be charged for an extension unless you would decide to complete this process manually.

    In case you need any further information or help regarding this topic, you can contact Avangate Support directly at:

    http://www.avangate.com/shopper-support/

    Best regards,
    The Avangate Team

  • Irina Mihaila says: September 20th, 2013 at 1:35 pm

    Hello Renatto,

    Our Support team found that you did indeed find a subscription under your name for a software by Iobit. This subscription has been extended automatically as a result of an auto-renewal option being set up at the time of your initial purchase.
    Our records show that an email notification was in fact sent to your address a week prior to the renewal date, but since no action was taken, your subscription has been extened automatically.
    If you wish to manage renewal settings for products/subscriptions purchased through Avangate, you can do so at any time by accessing the Avagnate myAccount area:

    https://secure.avangate.com/myaccount/

    In case you need any additional information or help regarding this topic, our support team is available through one of the contact channels listed below:

    http://www.avangate.com/shopper-support/

    Best regards,
    The Avangate Team

  • james pinkerton says: March 11th, 2014 at 10:50 pm

    i would like to know r u telling me i was ripped off i never got no work done to my computer i dont know how this happens because i phoned microsoft and then somebody there gave me the number or i might have thought about it . so i will have to pay somebody else good luck bye james

  • Irina Mihaila says: March 13th, 2014 at 9:29 am

    Dear James.

    Avangate manages the eStores of thousands of Software and SaaS Companies worldwide. Our assistance is limited to providing information about payment related issues and questions.

    However, for your convenience, we can intermediate your request for assistance to the software publisher. You can contact us via one of the channels listed below and we will do our best to help you solve this issue. Our Support Team is available 24/7.

    http://www.avangate.com/shopper-support/

    Thank you.
    The Avangate Team