When someone refers to spoofing or phishing, they are really describing the act of collecting various forms of personal data using a fake email or Web site. Many times the phisher is looking to collect credit card, bank account or social security numbers and passwords for your online accounts. Once they collect this data, you may become the unfortunate victim of identity theft or Internet fraud.
Anytime you think you have received a phishing email that states it is from Paypal, report it to the email address firstname.lastname@example.org. Make sure to forward the email in its entirety for the Paypal team.
If you wish to speak to a Paypal representative, call their customer service agents at 1-402-935-2050 (a U.S. telephone number). PayPal customer service agents are available to help you during the following times: 4:00 AM PST to 10:00 PM PST Monday through Friday, 6:00 AM PST to 8:00 PM PST on Saturday and Sunday
Report phishing scams to Paypal using the regular postal service. Their address is: PayPal, P.O. Box 45950, Omaha, NE 68145-0950. Remember to send any postal mail about phishing scams by next day post, as most companies or Web sites can only track phishers for approximately 48 hours after an email is received.
Once you report the phishing scam to Paypal in one of the above ways, delete the email from you inbox.
Paypal will always use a greeting which includes your first name, last name or business name. They will never send you an email with the generic greeting "Dear Paypal User" or "Dear Paypal Member." To check the validity of a Paypal email, go to your Paypal account. If there is a real problem with your account, it will state so as soon as you log on. Remember, if you contact Paypal by phone, the only person customer service agents are permitted to speak to is the account holder.
Never click a link provided in an email which you think might be a phishing scam. The act of clicking on the link could damage your computer, so why chance it? Don't try to contact phishers, even to tell them to take you off their list. This will inform them that your email is a valid one and could result in additional phishing attempts.