We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message
80,259 News Articles

PayPal asks email services to block messages

Anti-phishing measures from eBay's PayPal

eBay's internet money-transfer system PayPal wants to persuade email providers to block messages that lack digital signatures, a PayPal company lawyer said today. Digital signatures are aimed at cutting down on phishing scams.

No agreement has been made so far, but the idea is one that PayPal would like to see from other e-commerce businesses, said PayPal's Joseph E Sullivan at the International E-Crime Congress in London.

An agreement with, for example, Google for its Gmail service could stop spam messages that look legitimate and get past spam filters.

PayPal is using several technologies to digitally sign its emails, including DomainKeys, Sullivan said. DomainKeys, a technology developed by Yahoo, enables verification of the sender and integrity of the message that's sent.

PayPal is one of the most highly spoofed brands, with fraudsters sending out spam to lure vulnerable users to look-a-like websites where their log-in details and passwords are collected and abused for profit.

Once a hacker has gained control of a PayPal account, it's possible to send money to other PayPal accounts or purchase goods. PayPal has introduced rules to counter fraud, such as limits on how much money can be transferred. PayPal also compensates users who've had their accounts hijacked, Sullivan said.

But the phishing problem is getting worse than when he started working for eBay five years ago, Sullivan said.

Last week, Sullivan said he got a call from his father, who said he'd fell prey to a phishing scam. While spam-filtering technologies have improved and awareness around phishing is rising, users tend to be the weakest point, falling for sometimes very convincing social-engineering tricks.

"I think one lesson we've learned is that education isn't going to stop this," Sullivan said. "Phishing attacks are too good now. Every company that does business on the internet is being targeted by phishing scams now."

The number of phishing sites is also rising. A report released last week by the Anti-Phishing World Group, a consortium of vendors and government agencies, said the number of fraudulent websites in January reached an all-time high of 29,930.


IDG UK Sites

Best Black Friday 2014 tech deals: Get bargains on smartphones, tablets, laptops and more

IDG UK Sites

What the Internet of Things will look like in 2015: homes will get smarter, people might get fitter

IDG UK Sites

Artist creates a geometric rave in a chapel for The House of St Barnabus

IDG UK Sites

Mac mini (Late 2014) 1.4 GHz review: Mac mini is sort of upgradable, but is it any good as it is?