All credit for the idea goes to:
Aneubarlorey
and
2dgreengiant
The reason for this thread is that even though the idea of Aneubarlorey's scam is good, it's not very authentic - I'm trying to make it look more like an actual mail from PayPal, using their original template.
1st step)
Find your target.
First find a website that sells gold. Then you can choose to either buy a small amount and get the info, or just hope for the best and type something in. What you are to type in and where we'll get on to further down in the post.
2nd step)
Get your code in order.
This is the HTML code you are going to use:
Code:
<html>
<body>
<div><br />
<br />
<br />
<div>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="600">
<tbody>
<tr valign="top">
<td><a href="https://www.paypal.com/row" target="_blank"><img src="http://images.paypal.com/en_US/i/logo/email_logo.gif" alt="PayPal" border="0" /></a></td>
</tr>
</tbody>
</table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%">
<tbody>
<tr>
<td background="http://images.paypal.com/en_US/i/scr/bg_clk.gif" width="100%"><img alt="" src="http://images.paypal.com/en_US/i/scr/pixel.gif" border="0" height="29" width="1" /></td>
</tr>
<tr>
<td><img alt="" src="http://images.paypal.com/en_US/i/scr/pixel.gif" border="0" height="10" width="1" /></td>
</tr>
</tbody>
</table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="600">
<tbody>
<tr>
<td></td>
</tr>
</tbody>
</table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="625" style="font-family:Arial, Helvetica, sans-serif; font-size:12px">
<tbody>
<tr valign="top">
<td width="100%"><table align="right" bgcolor="#cccccc" border="0" cellpadding="1" cellspacing="0" width="190" style="font-family:Arial, Helvetica, sans-serif; font-size:12px">
<tbody>
<tr>
<td><table align="center" bgcolor="#ffffff" border="0" cellpadding="0" cellspacing="0" width="100%" style="font-family:Arial, Helvetica, sans-serif; font-size:12px">
<tbody>
<tr>
<td><table align="center" bgcolor="#eeeeee" border="0" cellpadding="5" cellspacing="0" width="100%" style="font-family:Arial, Helvetica, sans-serif; font-size:12px">
<tbody>
<tr>
<td align="center">PayPal – The safer, easier way to pay</td>
</tr>
</tbody>
</table>
<table align="center" border="0" cellpadding="5" cellspacing="0" width="100%" style="font-family:Arial, Helvetica, sans-serif; font-size:12px">
<tbody>
<tr>
<td><ul>
<li>Use your credit card without exposing your card number to merchants.</li>
</ul>
<ul>
<li>Speed through checkout without stopping to enter your card number or address.</li>
</ul>
<ul>
<li>Send money to family and friends for free.</li>
</ul>
<img alt="" src="http://images.paypal.com/en_US/i/scr/pixel.gif" border="0" height="5" width="1" /></td>
</tr>
</tbody>
</table></td>
</tr>
</tbody>
</table>
<table align="center" bgcolor="#ffffff" border="0" cellpadding="0" cellspacing="0" width="100%" style="font-family:Arial, Helvetica, sans-serif; font-size:12px">
<tbody>
<tr>
<td><table align="center" bgcolor="#eeeeee" border="0" cellpadding="5" cellspacing="0" width="100%" style="font-family:Arial, Helvetica, sans-serif; font-size:12px">
<tbody>
<tr>
<td align="center">Fight fake emails</td>
</tr>
</tbody>
</table>
<table align="center" border="0" cellpadding="5" cellspacing="0" width="100%" style="font-family:Arial, Helvetica, sans-serif; font-size:12px">
<tbody>
<tr>
<td><ul>
<li>Forward suspicious emails to <a href="mailto:[email protected]">[email protected]</a>.</li>
</ul>
<ul>
<li>Make sure you're using the latest internet browser.</li>
</ul>
<ul>
<li>Visit the PayPal Security Center.</li>
</ul>
<br />
<img alt="" src="http://images.paypal.com/en_US/i/scr/pixel.gif" border="0" height="5" width="1" /></td>
</tr>
</tbody>
</table></td>
</tr>
</tbody>
</table></td>
</tr>
<tr>
<td></td>
</tr>
</tbody>
</table>
You've got new funds!<br />
<br />
Dear INSERT COMPAY NAME HERE,<br />
<br />
<p>INSERT YOUR NAME HERE just sent you money with PayPal.<br />
<br />
INSERT YOUR NAME HERE is a Verified buyer.</p>
<hr />
<table align="justify" border="0" cellpadding="0" cellspacing="0" width="400" style="font-family:Arial, Helvetica, sans-serif; font-size:12px">
<tbody>
<tr>
<td colspan="3"><p>Payment Details</p></td>
</tr>
<tr>
<td colspan="3"><img alt="" src="http://images.paypal.com/en_US/i/scr/pixel.gif" border="0" height="10" width="1" /></td>
</tr>
<tr valign="top">
<td align="right" width="30%">Amount:</td>
<td width="5%"><img alt="" src="http://images.paypal.com/en_US/i/scr/pixel.gif" border="0" height="5" width="1" /></td>
<td width="65%"> AMOUNT HERE USD</td>
</tr>
<tr>
<td colspan="3"><img alt="" src="http://images.paypal.com/en_US/i/scr/pixel.gif" border="0" height="10" width="1" /></td>
</tr>
<tr valign="top">
<td align="right" width="30%">Transaction ID:</td>
<td width="5%"><img alt="" src="http://images.paypal.com/en_US/i/scr/pixel.gif" border="0" height="5" width="1" /></td>
<td width="65%">INSERT RANDOM 17-digit TRANSACTION ID </td>
</tr>
<tr>
<td colspan="3"><img alt="" src="http://images.paypal.com/en_US/i/scr/pixel.gif" border="0" height="10" width="1" /></td>
</tr>
<tr valign="top">
<td align="right" width="30%">Subject: </td>
<td width="5%"><img alt="" src="http://images.paypal.com/en_US/i/scr/pixel.gif" border="0" height="5" width="1" /></td>
<td width="65%">Kin'Toras, Horde, 2000g, Qtawres </td>
</tr>
<tr>
<td colspan="3"><img alt="" src="http://images.paypal.com/en_US/i/scr/pixel.gif" border="0" height="10" width="1" /></td>
</tr>
<tr>
<td><img alt="" src="http://images.paypal.com/en_US/i/scr/pixel.gif" border="0" height="1" width="110" /></td>
<td><img alt="" src="http://images.paypal.com/en_US/i/scr/pixel.gif" border="0" height="1" width="5" /></td>
<td width="70%"><img alt="" src="http://images.paypal.com/en_US/i/scr/pixel.gif" border="0" height="1" width="1" /></td>
</tr>
</tbody>
</table>
<br />
<table align="justify" border="0" cellpadding="0" cellspacing="0" style="font-family:Arial, Helvetica, sans-serif; font-size:12px">
<tbody>
<tr>
<td><a href="https://www.paypal.com/row/vst/id=transactionid" target="_blank">View the details of this transaction online</a></td>
</tr>
</tbody>
</table>
It may take a few moments for this transaction to appear in the Recent Activity list on your Account Overview.<br />
<br />
<br />
<hr />
<p>Have you lifted your withdrawal and receiving limits? Just log in to your PayPal account and click <strong>View Limits</strong> on the <strong>Account Overview</strong> page.</p>
Thank you for using PayPal!<br />
The PayPal Team<br />
<hr />
Copyright © 1999-2008 PayPal. All rights reserved.<br />
<br />
PayPal (Europe) S.à r.l. & Cie, S.C.A.<br />
Société en Commandite par Actions<br />
Registered Office: 5th Floor 22-24 Boulevard Royal L-2449, Luxembourg<br />
RCS Luxembourg B 118 349</td>
</tr>
</tbody>
</table>
</div>
</div>
</html>
You are going to have to replace the following:
Company Name
Your name
Amount (which currency, etc.)
Transaction ID
Subject
You do that by searching for the following (put the code into Notepad or Wordpad, or whatever you would like to edit it in).
Search for this to start with:
INSERT COMPANY NAME HERE
Well, that's simple, just insert the company name - sometimes the company name goes under a different name, or sometimes just a person, so it might be an advantage to have ordered from them before and gotten their name.
Then right under, or search:
INSERT YOUR NAME HERE
Well, insert your full name here - of course not your real name.
Then right under, or search:
INSERT YOUR NAME HERE
Insert the same name again, you used before.
The next you need to search for is:
$INSERT AMOUNT HERE USD
You need to replace this with the amount that the gold cost (check the website for server, etc.), remember to get the correct currency, so if the site uses Euros change the $ sign to €.
Then right under, or search for:
INSERT RANDOM 17-digit TRANSACTION ID
As it says, insert a random sequence of numbers and letters, 17 numbers/letters.
Then right under, or search for:
Kin'Toras, EU, Horde, 2000g, Yourcharname
Replace this with your servername, charc. name, etc. as with the company name box, it would be a huge advantage if you knew what the subject usually is from the company you are scamming, because every company has a different way of showing the charc. to deliver to, which server, etc. if you want to try your luck - simply type in as above, with your server, EU or US, and so on.
The last thing you can do (optional) is search for:
View the details of this transaction online
Then replace the thing in front of it, which currently says:
<a href="https://www.paypal.com/row/vst/id=transactionid" target="_blank">
Change "transactionid" to the transaction ID. you have inserted. You can also choose to leave it as that, or simply remove the whole thing if you want to. If the company click on that they will most likely get an error about the transaction being non-existant.
3rd step)
Sending it all.
I prefer a fake e-mailer such as:
SOOM.cz - Fake Mailer
The money I have received has actually come from whomever is sending it to me, so you can create any gmail, hotmail, etc. account and use that to send it, or you can use a paypal address such as: [email protected] - I don't think you can use the .com, at least this post says you can't with the fake e-mailer. So put that in your "From:" box.
In the "To:" box it should be the company's PayPal address. AGAIN, it would be a huge advantage to have the company's PayPal address, which in some places can only be found by actually ordering something. Otherwise, try using the tip from Aneubarlorey's post:
Also, a tip: Ask them on livechat or make a quick order without paying, to get their PAYPAL MAIL! When you have their paypal, just make a fake mail, use my html above, get the html and, paste it into the mail. When you've send wait a few hours go on live chat. BOOM, you'll get your money if they are noobs.
So that's the "To:" part.
The "Subject:" part is actually the subject of the e-mail, so in this case it would be: "Kin'Toras, EU, Horde, 2000g, Yourcharname"
The last thing you need to do, before putting the html in the "Text" box, is that under "C-Type" you HAVE to set it to text/html.
Insert the HTML code in the text box, press send, and hopefully you'll cash in some gold
Enjoy!
The actual scam looks like this: