I thought I'd pass this warning along for other developers that accept sales or donations via PayPal. Today I received an html email entitled "Your PayPal account is Limited." on my sales email address. It looks like correspondance from PayPal, except that it contains a form to "verify" your email address, password, credit card and bank account info. Although professional in appearance, the email reeked of a scam. So I called PayPal and learned that it is indeed an attempt to steal credit card and banking account numbers. The form uses a script at http://www.parom.org//cgi-sys/formmail.pl to email the data to ppsecure@kaitak.com
The body of the email (sans form) is as follows:
PayPal is currently performing regular maintenance of our security measures. Your account has been randomly selected for this maintenance, and placed on Limited Access status. Protecting the security of your PayPal account is our primary concern, and we apologize for any inconvenience this may cause.
To restore your account to its regular status, you must confirm your email address by logging in to your PayPal account using the form below:
Dan East
