I've seen some pretty clever ebay and paypal ones. Well worded and all that, the only giveaway is the link, it's usually a subdomain like ebay.blahblah.com
So I clicked the link and it goes to what looks exactly like an ebay or paypal logon screen. I typed a fake username and password in and here's the genius part, it spits out an "incorrect password" message and then redirects you to the correct logon page. So the user types in their details again, gets in and just assumes they mis-typed the first time, meanwhile your details have already been sent off.
Some of them are tricky, but as Cassini90125 said, no one needs to know or confirm or require you to change your details but you.
|