Categories: NewsSecurity

New PayPal Phishing Site Demands Users Submit a Selfie While Holding an ID Card

Over the past few months, we have seen a major increase in the number of PayPal phishing websites. Most of these platforms have also obtained the official PayPal SSL certificate, which is making matters even more complicated. It now appears some of these phishing sites ask visitors to submit a selfie where they hold their ID card. This is a so-called “identity verification procedure,” yet it exposes victims to potential identity fraud.

PayPal Phishing Sites Take Things to the Next Level

It is not entirely surprising to see criminals still deploy PayPal phishing websites. Now that it has become a lot easier to obtain SSL certificates for these sites, criminals are having a lot of success when it comes to defrauding users. In the most recent iterations of these phishing sites, criminals ask victims to confirm their identity by holding their ID card and taking a selfie. A very troublesome development, which could lead to all kinds of nasty consequences.

Phishing sites primarily exist to trick PayPal users into giving up their account login credentials. Additionally, some sites ask for additional personal information to confirm one’s identity. Requesting a selfie in which the user is holding their ID card makes a lot of sense in this regard. However, it is also a problematic development. For now, it is unclear what the criminals aim to achieve by collecting these selfies, yet they can do a lot of damage with it.

These new phishing sites work in the same manner as all similar sites did before them. Users are asked to enter their login credentials, after which they are greeted by a new page asking them to confirm the identity of the user. In one case, the assailant built a platform where users need to complete a four-step verification process. Users were asked to submit their personal address, payment card data, and the aforementioned selfie while holding one’s ID card.

Related Post

It is certainly possible this ID information will be used for nefarious purposes. While the exact objective remains shrouded in mystery, some experts believe this selfie will be used to create accounts on cryptocurrency exchange platforms. Once such an account is established, criminals will be able to launder money through them while using someone else’s credentials. Thinking along these lines is a bit of a stretch, although one cannot dismiss the possibility either. Most exchanges ask users to verify their identity through a selfie while holding an ID card.

It is not the first time we see phishing site owners ask for a selfie depicting the user holding their ID card. The Acecard Android banking Trojan, which ran rampant in 2016 used a similar tactic. At that time this was considered to be a novel approach, although it has become a lot more common these days. In the case of these PayPal phishing sites, users are asked to upload the photo from their computer, rather than allowing them to access the webcam directly.

Further analysis of these PayPal phishing sites reveals none of the information – including the photo – is stored on this server. Instead, the email form is submitted to a Russian email account belonging to the Yandex service. Rest assured law enforcement agencies all over the world will try to find out who is behind this upgraded PayPal phishing scam, though. Actions like these will not go unpunished all that long.

If you liked this article, follow us on Twitter @themerklenews and make sure to subscribe to our newsletter to receive the latest bitcoin, cryptocurrency, and technology news.

JP Buntinx

JP Buntinx is a FinTech and Bitcoin enthusiast living in Belgium. His passion for finance and technology made him one of the world's leading freelance Bitcoin writers, and he aims to achieve the same level of respect in the FinTech sector.

Share
Published by
JP Buntinx

Recent Posts

TRX Price Prediction: Tron Network Fee Cut to Spark New ATH?

Back into Spotlight: Tron Network Fee Cut Could Push TRX to ATH, But This DeFi…

8 hours ago

Altcoin Alert: Crypto Market Cap Breaches Key Level Hinting at an 8000x Rally for this Shiba Inu Killer

Shiba Inu (SHIB) gave enormous returns in 2021, making many early holders millionaires. After the…

12 hours ago

XRP Crash? XRP Falls Below $0.5 Resistance Level as Next Gen Altcoin JetBolt Takes Over

Spooky season might be over but doom is still looming as Ripple’s XRP falls below…

15 hours ago

This New Exchange Token Is Poised for a Price Surge Alongside Cardano and Avalanche – Analysts Predict Huge Gains This November

Three promising altcoins are causing a stir among investors this November: Avalanche (AVAX), Cardano (ADA),…

15 hours ago

With Dogecoin Dipping and TRON Holding, Is Lunex the Hottest Crypto Now?  

Everyone knows what the hottest crypto can do. When it was so hot it was…

15 hours ago

Tron Fees To Be Cut In Half Through Proposal 95, Cutoshi Surpasses $600k As TRX Investors Join CUTO Presale

The Tron network has witnessed incredible growth in several areas, especially in its adoption, which…

16 hours ago