PayPal asking e-mail services to block messages - Network World

Skip Links

DNSstuff.com
Get information about your IP
IP Information
50+ On-demand DNS and network tools

Security

Videos

rssRss Feed
Get instant email notification when white papers, webcasts, executive guides are added to our library.  Stay informed and up-to-date with the latest on IT Technologies with Network World's Resource Alerts.
Audio

Crackin' the Kraken bot. Listen now!

Network World's Newsmaker of the Week

Wireless dangers at airports. Listen now!

Network World Panorama

Additional Resources

RSS

FEATURED REPORTS

Executive Guide: Storage Heats Up HP

Get the latest on storage technologies that allow IT professionals to better cope with new IT demands. Learn how storage technologies can help you successfully tackle e-Discover, regulatory compliance, green data center initiatives and the data explosion. Get all the details now.

RSS

FEATURED WEBCASTS

Reduce the Complexity and Cost of Windows Server Consolidation in Six Modules Novell

Watch this webcast to learn in six modules how to more cost effectively consolidate your Windows servers with virtualization. This unique program allows you to pick and choose which of the six modules you would like to view or watch the entire webcast at once. Topics covered: Performance, Use Cases, Enterprise-level Support, Managing Windows Workloads, Setup and Configuration and The Future. Find out how you can simplify server consolidation within your organization today. Register below to learn more and be entered to win an Archos 605 Portable Media Player.

IT Buyer's Guides

View All Buyer's Guides

Free Newsletters

Sign up and receive the latest news, reviews and trends on your favorite technology topics

Save The Date!
What They Are Saying

Coming from financial computing world to this "modern" computing a long time ago I was horrified. The...- tuomoks

Join the Discussion

PayPal asking e-mail services to block messages

By Jeremy Kirk , IDG News Service , 03/27/2007
  • Social Web 
  • Email 
  • Feedback 
  • Close

PayPal, the Internet-based money transfer system owned by eBay, is trying to persuade e-mail providers to block messages that lack digital signatures, which are aimed at cutting down on phishing scams, a company attorney said Tuesday.

So far, no agreements have been reached, but the idea is one that PayPal would like to see from other e-commerce businesses, said Joseph E. Sullivan, PayPal's associate general counsel, at the International E-Crime Congress in London.

An agreement with, for example, Google for its Gmail service could potentially stop spam messages that look legitimate and bypass spam filters.

PayPal is using several technologies to digitally sign its e-mails now, including DomainKeys, Sullivan said. DomainKeys, a technology developed by Yahoo, enables verification of the sender and integrity of the message that's sent.

PayPal is one of the most highly spoofed brands, with fraudsters sending out spam to lure vulnerable users to look-a-like Web sites where their log-in details and passwords are collected and abused for profit.

Once a hacker has gained control of a PayPal account, it's possible to send money to other PayPal accounts or purchase goods. PayPal has introduced rules to counter fraud, such as limits on how much money can be transferred. PayPal also compensates users who've had their accounts hijacked, Sullivan said.

But the phishing problem is getting worse than when he started working for eBay five years ago, Sullivan said.

Last week, Sullivan said he got a call from his father, who said he had fallen prey to a phishing scam. While spam-filtering technologies have improved and awareness around phishing is rising, users tend to be the weakest point, falling for sometimes very convincing social engineering tricks.

"I think one lesson we've learned is that education isn't going to stop this," Sullivan said. "Phishing attacks are too good now. Every company that does business on the Internet is being targeted by phishing scams now."

The number of phishing sites is also rising. A report released last week by the Anti-Phishing World Group, a consortium of vendors and government agencies, said the number of fraudulent Web sites in January reached an all-time high of 29,930.

Comments (5)
Login
Forgot your account info?

SPF is more widely supportedBy Pengdows on April 27, 2007, 10:24 amSPF is more widely supported, and goes hand in hand, with DomainKeys, but all SPF failures need to be treated as "hard failures". DomainKeys aren't enough,...

Reply | Read entire comment

PayPal Phishing ScamsBy Garthm on March 30, 2007, 6:30 pmAs a PayPal account holder, I get frequent (and usually lame) phishing con emails saying that a new email account has been added to my account or it is being restricted...

Reply | Read entire comment

Blocking SPAMBy Anonymous on March 30, 2007, 10:21 amI have no objection to paying a reasonable fee for a token which would insure email to our customers gets to it's destination unmolested. I just don't believe any...

Reply | Read entire comment

PayPal asking e-mail services to block messagesBy Anonymous on March 30, 2007, 2:38 amIn principal this is a very good idea. I get this stuff many times a day. I also get ideas on how to improve my manhood. The problem is if anybody is allowed to...

Reply | Read entire comment

Digsig as a way to block spamBy Anonymous on March 28, 2007, 8:58 pmIMHO, I think that those of us whose domains and identities have been hijacked by spammers should be able to: a) Register for a digsig b) Register on the spam...

Reply | Read entire comment

View all comments

Add comment
Anonymous comments subject to moderator approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.
First Name
Last Name
E-mail
Zip Code