Search our Spoof Library...
Another Spoof Email and Phishing Scam report by - click this image to go to our home page.

Notification of PayPal Limited Account Access
26th May 2004

please forward any scams you've received to


Report Summary
Date Reported
first reported 7th March 2004
Apparent Sender
Return Address
Notification of PayPal Limited Account Access
HTML (looks like text only)
disguised link leads to bogus web content
Bogus Web Content?
URL of web content

bogus Paypal page shown in front of a genuine Paypal page
NOTE: a variety of other URLs are in use


1. Uses script to open a genuine to give the impression that the bogus page is a pop-up generated by the genuine page.
2. The bogus page is opened with tool, status and address bars removed to conceal its URL which would give the scam away if shown.
3. Other URLs have been found to be in use in the delivery of the forged web page.


A pop up style window displays a bogus form giving the impression that it is generated by the genuine Paypal page which this spoof email opens when using the link provided...


This spoof Paypal email (see image below) is in HTML format (although it does look like a text only email in order add a sense of authenticity to the link text). The link in the email has been disguised using HTML code to look like a genuine link to Paypal's secure server but it has been further coded to display a bogus form with genuine a page.

Using the link will trigger 2 new browser windows... we will see a genuine page in one window, then what appears to be a pop up window will appear in front of that. This is achieved through the use of JavaScript, and its purpose is purely to fool users into thinking that they are seeing a pop up window which is generated the page. The pop up window has been crafted to open with the menu, tool, status and address bars removed to prevent users from seeing the true URL which would reveal its bogus nature ( which resolves to web space provided by Cyber World Internet Services, Inc. in the USA).

Any information submitted is processed through a script located on the same server as the bogus content.

If you have received this email, please remember that it is very common for these email scams to be redistributed at a later date with only slightly different content or the same but with the fake page(s) hosted by a different provider. Also, once you have received one of these hoaxes, it is also common place to receive at least another one and usually a day or two after the first, although not necessarily from the same apparent sender.


The Spoof Email ...

Notification of PayPal Limited Account Access


The bogus web page (pop up with genuine page in background window)...

Notification of PayPal Limited Account Access

Stay informed of the latest Spoof Email Phishing Scams with either of our FREE alert services...

Stay informed of the latest Spoof Email Phishing Scams with either of our FREE alert services...

Email Alerts
Add your email address to our email alert service...

Privacy Policy

RSS News Feed
Tap into our Scam Alert service using your News Reader or Aggregator (including My Yahoo!).
Scam Alert News Feed

You can even put the latest alerts on your own web site.

Click here to learn more about RSS News Feeds and our Scam Alert Service!

Resources links - use one of the links below to access more information on Spoof Email & Phishing Scams.

Library of Spoof Email Phishing Scams

Brief guide to Phishing

Full article on spoof email scams

Spoof URL Checker

Link Checker

Browser URL Spoofing Vulnerability Check

Latest browser bug aids Phishing Scams - beware!

Destinations - other resources available on the web site.

Click the arrow to return to previous page



Book Terminology

How to identify a first edition book

Auction Watcher

List of the main Auction Sites world wide