So I haven't used Paypal in at least five years, but apparently my account is still open. Today I received the two emails below.
Dear XXXXX XXXXXX,
On Nov. 30, 2008, we attempted to transfer $312.90 USD from your bank account, ending in XXXX. This transfer was returned by your bank on Dec. 3, 2008 for the reason below:
This is an invalid bank account number.
As a result, this bank account has been disabled from your PayPal account. Please contact your bank for more information or add a new bank account. Please do not contact PayPal because this is entirely an issue between the account holder and their bank.
Dear XXXXX XXXXXX,
On , we attempted to transfer $312.90 USD from your bank account, ending in . This transfer was returned by your bank on for the reason below:
There was a bank processsing error.
As a result, this bank account has been removed from your PayPal account. Please contact your bank for more information or add a new bank account. Please do not contact PayPal because this is entirely an issue between the account holder and their bank.
Sincerely,
PayPal
Notice that the second one is the exact same email, without the account info.
Both emails were received from "service@paypal.com" and both were directed to the correct email address. Neither had any links to phishing sites.
Now, what's really freaking me out is that, when I try to log into paypal to check what's going on in the account, I get the following screen.
Now, that's from the Paypal website, with a Paypal certificate. The credit card is correct.
What the fuck? Why would Paypal have me do that immediately? Should I jeopardize entering in the info, considering it appears that I've got a legit connection to the site? Is there any way to completely get rid of a paypal account without logging in through the site?
Also, is there some way that a virus on this PC could allow someone to spoof the site?
*edit*
It gets stranger.
I just checked the credit card, and a website, through Paypal, somehow credited me $166.38, on a credit card with zero balance, and then removed the credit. It strikes me as some kind of fraud, except nothing has actually been taken from me.
What the hell should I do?
Posts
This.
Try paypal from a different system.
There are certain pieces of malware which will install a mini webserver on your system keying in for certain sites.
So when you go to them they look perfectly normal and valid, but they are showing you wrong info, and more problematic, sending the info YOU put back to someone else.
If you go to a fresh/clean system and it all looks the same as what you saw here, no problem (other than paypal wierdness). If you see shit that looks way different, then start changing passwords (from the clean system) and getting in touch with your bank/paypal as some of your personal info may be "in the wild" as it were.
Definitely agree here. Don't try and figure it out alone just call and ask.
Critical Failures - Havenhold Campaign • August St. Cloud (Human Ranger)