The Ferryman

I have had a strange email, which says it is from Krystal, about an outstanding payment. The amount they quote is higher than the monthly amount I pay them and they say my PayPal payment is overdue. As far as I know, I don't pay them by PayPal and if I do, there is plenty money in my account to cover it.

It says I should go to their website and pay the amount they are asking for, but I couldn't log in to their site with my usual ID, it said I had to reset my password, which I did and was sent a new password.

This is all very strange and I am reluctant to go in with the new password and give someone my card details, in case they have been hacked in some way.

Anyone else had anything similar?

Regards

Bruce

Systreg

Sounds more like phishing than hacking, when you hover over the Krystal link in the email, what url does it give you in your status bar? Or what url in the browser did it take you to?

Can you post the full headers from the email you received, xxxxx out your email address first.

mat

Give them a call 0845 075 2002 and check whats going on.

__________________
Mathew.co.uk - Follow me on Twitter here

The Ferryman

Everything about the emails look genuine, when you hover over the links etc, apart from the wrong amount, payment method, etc, which is why I thought about hacking rather than phishing.

Is that phone number their proper number, I was reluctant to ring the one on their website in case it is wrong as well.

Bruce

Systreg

I just looked at some cached pages of Krystal's site in Google, and for April 16th it's giving the same 0845 075 2002 number as Mat posted above

Systreg

Bruce, another number to call, MrMason who is a director at Krystal is a member on Acorn, profile here: http://www.acorndomains.co.uk/members/mrmason.html

His sig line gives this number to call: 0845 2000 699

Edwin

If you go straight to their website (not from the email) can you log in using the old password? That would show you were phished.

__________________
Memorable Domains Ltd - Over 7,000 descriptive, generic .co.uk domains for sale
Please note: All sale prices over a week old are automatically invalid. No exceptions. Thanks!

The Ferryman

Tried to ring them at 5.30, but they go home at 5, I'll try in the morning.
Edwin, no, I never use links from email, I went directly to their website, but couldn't log in with my usual password, it said I had to change it.
I have checked back previous invoice and emails, they never seem to give a phone number anywhere, but I confirmed I pay by credit card, not PayPal, and the card is current and has sufficient credit.
Will report when I have spoken to them tomorrow, it could just be a problem with their billing system.
Bruce

seemly

I noticed that Krystal recently changed their interface, which may have included the database? As when I went to the site to look at my account the other day and I had to reset my password.

The whole user account control panel has changed (in a good way).
I have been there a few times since now, and all is fine, no strange emails or payment requests, etc.

Let us know how you get on.
Like I say, mine was ok. =)

seemly

also, here is a quote from when I log in to my account, which may help explain the whole paypal thing?: