Online Threat Alerts (OTA) - Alerting you to scams and frauds.

"PayPal You Sent a Payment" Phishing Scams
PayPal You Sent a Payment Phishing Scams

PayPal users, be aware of fake PayPal email messages claiming that you have sent money. The fake or phishing email messages are being sent by cybercriminals to trick PayPal users into clicking on a link within them that goes to a fake or phishing PayPal web page. The fake webpage will then attempt to steal PayPal credentials and credit card information. So, it is important that PayPal users remember never to click on a link to sign into their PayPal accounts. They should instead, always go directly to www.paypal.com.

A Sample of the Fake or Phishing PayPal Email Message

From: mailto:Account-mesures@ supportLoginIDS. onmicrosoft.com

Sent: Monday, June 13, 2016 1:39 PM

Subject: PAYPAL : You sent a payment in the amount of 75.20EUR ? OVH S.A.R.L‏

PayPal

Tran saction Number : 8441N2481P54741z

Hello,

You sent a payment in the amount of 75.20EUR ? OVH S.A.R.L (reservation2016@ corsicaferres.com)

It Is possible That the transaction appears after a few minutes on your account.

Having problèmes with This transaction ?

You have a période of 24 hours from the date of the transaction to cancel the payment.

*Enter all your personal information to your account!!

Click here to cancel the payment immediately.

Note: the cybercriminals may change the payment number, so look out for similar emails with different numbers.

The link in the fake email message goes to a fake PayPal web page on a compromised website that was designed by cybercriminals to trick their potential victims into entering their PayPal username, password and credit card information.

If the requested information is submitted by the potential victims, it will be sent to the cybercriminals, who will use it to steal their money and use their accounts fraudulently.

If you are tricked into submitting your PayPal credentials and credit card information on the fake web page, please change your PayPal password and contact them for help immediately. Also, contact your bank and let them know that you have submitted your credit card information on a phishing website.

Remember, never click on a link to sign into your PayPal account, always go directly to www.paypal.com and login from there.

35

Comment sectionComments / Answers (35)

Remove sensitive information from your post. Your IP address will be used to display your estimated location.

Comment count 35

by info

"From: brock jordon
To: undisclosed-recipients:;
Date: 10/30/2020 4:06 AM
Subject: If you want to cancel This payment



Dear Customer,

Order Confirmation(Ref-MLNJ451A54)
Transaction ID: THBFF44518.

You have sent a payment of $ 754.99 USD From Your Paypal Account If you want to cancel This payment Or Approve This Payment Kindly Call us on- 1(971) 288-0787
As a security measure, we routinely monitor account activity to prevent fraudulent use of our customers accounts.

We noticed some unusual activity on your Paypal account and are concerned about potential unauthorized access.
Your Paypal account is being charged with $ 754.99 USD We Want to Confirm That this Purchase Is made By You Or Not

And If you want to cancel This payment Or Approve This Payment Kindly Call us on- 1(971) 288-0787 with your account until you take action.
Your Paypal account is being charged with $ 754.99 USD We Want to Confirm That this Purchase Is made By You Or Not
And If you want to cancel This payment Or Approve This Payment Kindly Call us on- 1(971) 288-0787

What's going on?
We noticed some unusual activity on your PayPal account and are concerned about potential unauthorized account access.

What do I need to do?

If you need help or have any questions, call us at- 1(971) 288-0787
Sincerely,

PayPal
Toll Free- 1(971) 288-0787 U.S. (corporate headquarters)
Address- 455 California, Omaha,U.94102,"

Here is another scam.

Delete


by info

Here is another scam:

"Von: orange_ltd-mail-zg367.getresponse.com im Auftrag von service
Gesendet: Sonntag, 13. Mai 2018 20:08
Betreff: you've sent a payment

May 13, 2018
Transaction ID: O-15G0220K7763W

Dear,

You've sent a payment of 22.00 EUR to Orangemobile Ltd.
Thanks for using PayPal. Please note that this is not a charge. Your account will be charged when the merchant processes your payment. You may receive multiple emails as the merchant processes your order.

Your funds will be transferred when the merchant processes your payment. Any money in your PayPal account at that time will be used before any other payment source.

It may take a few moments for this transaction to appear in your account.

Merchant
Orangemobile Ltd.
cs-ornagemobile.com Instructions to merchant
You haven't entered any instructions."

Delete


by info

I received the attached this morning. I’ve never used Viber, and certainly didn’t subscribe or order anything from them.

I didn’t click on any links and forwarded the email to PayPal to inform them.
Thought you should see this as well as I've seen other issues regarding Viber scams on your site.
Thanks.


- - - - - - - - -
From: Viber
Sent: Saturday, June 2, 2018 11:12 AM
Subject: Receipt of your Payment to Viber

PayPal

June 2, 2018 10:00:11 PDT
Transaction ID: NT00SDO510236E

Hello ,

You sent payment of $1250.00 USD to payme-viber.com

Thanks for using our service. To see all the transaction details, log in to your account.


It may take a few moments for this transaction to appear in your account.

Your transaction is being reviewed because our system has detected that you are using a new unknown device !

Issues with this transaction?

Cancel and Report >

Seller
Viber Subscribers Note to seller
You haven't included a note.
Shipping address - confirmed
Viber Store

No shipping address needed

Shipping details
The seller hasn’t provided any shipping details yet.


Description Unit price Qty Amount
Viber Pack 1 Year Subscription Instant delivery
Item# 322300197235 $1250.00 USD 1 $1250.00 USD

Shipping and handling 0.00 USD
Insurance - not offered ----
Total $1250.00 USD
Total EUR €1180.17 EUR
This charge will appear on your credit card statement as *Viber.deposit"
From amount 0.00USD
To amount $1250.00 USD
Exchange rate: 1 EUR = 1.14177 USD

Currency conversion: To complete this transaction, our currency conversion fee is added to the exchange rate, set by an external financial institution. For more information about fees, see our user agreement.

Issues with this transaction?
You have 180 days from the date of the transaction to open a dispute in the Resolution Center.

Need to contact the seller? go to your account or click on the link in your purchase email to see your order details. For more help visit Resolution Centre.

Delete


by an anonymous user from: Jesús María, Lima, Peru

Here is another scam:

"May 15, 2018

Transaction ID: USA86SAKJNNL3A
Dear Costumer,

You sent a payment $23.97 USD to GoDaddy, Ltd.
(payment-godaddy.com)

​It may take some time until this transaction to appear in your account.

Merchant
GoDaddy, Ltd.
payment-godaddy.com Instructions for merchants
None provided

Description Unit Price Quantity Total
Ultimate Hosting (Best Value)
​Item #984654309 $7.99 3 $23.97 USD

Subtotal
$23.97 USD
Total $23.97 USD
Payment $23.97 USD
Payment sent to payment-godaddy.com

Invoice ID: 9836670

You have 30 days from the date of the transaction to open a dispute in the Resolution Center

​ You don't recognize this transaction?
Click to Dispute this transaction

You have 24 hours from the date of the transaction to open a "DISPUTE" in the Resolution Center.
Please do not reply to this email. This mailbox is not monitored and you will not receive a response. For assistance, log in to your PayPal account and click Help in the top right corner of any PayPal page.

You can receive plain text emails instead of HTML emails. To change your Notifications preferences, log in to your account, go to your Profile, and click My settings."

Delete


by an anonymous user from: Shah Alam, Selangor, Malaysia

Received this scam:

"Hello 1-hotmail.com,

You sent a payment of $233.00 USD to Chris Arning

We assume that your account wasn't used by you Your transaction is being reviewed because our system has detected that you are using a new unknown device.

You can Cancel this transaction.
It may take a few moments for this transaction to appear in your account.

Merchant
Chris Arning Instructions to merchant
You haven't entered any instructions.

Shipping address - confirmed
Ibrahim Yasir
Flat 4-G-02
Hulhumale
Male’, Maldives,
20057
Maldives Shipping details
The seller hasn’t provided any shipping details yet.
Description Unit price Qty Amount
XMP Bursters L8 x 1000 $233.00 USD 1 $233.00 USD

Subtotal $233.00 USD
Total $233.00 USD

Payment $233.00 USD
Charge will appear on your credit card statement as "PAYPAL"

Issues with this transaction?
You have 180 days from the date of the transaction to open a dispute in the Resolution Center.

Questions? Go to the Help Center at www.paypal.com/mv/help.

You can receive plain text emails instead of HTML emails. To change your Notifications preferences, log in to your account, go to your Profile, and click My settings."

Delete



by an anonymous user from: Schaarbeek, Brussels, Belgium

Hello,


I received today 13 meI 2018, the same email about a payment o 233 dollars. I have tranfered it to the Paypal's customer's service. Best regards. André TILMAN. Belgium

Delete


by an anonymous user from: Cuauhtémoc, Mexico City, Mexico

What happens if you click on cancel it? I did it by accident but it sent me to an empty page.

Delete


by info

The page may have been taken down. But, the link would have gone to a fake PayPal website where you will be asked to sign-in. If you attempt to sign-in, your PayPal username and password would be sent to the cybercriminals who will use it to gain access to your account and use it fraudulently.

Delete


by an anonymous user from: Vienna, Austria

Got phishing mail on may 8th 2018:

"paypal May 08, 2018
Transaction ID: 1FE02163TB5091019

Hello,

You sent a payment of $233.00 USD to Chris Arning

We assume that your account wasn't used by you Your transaction is being reviewed because our system has detected that you are using a new unknown device.

You can Cancel this transaction.
It may take a few moments for this transaction to appear in your account.
Merchant
Chris Arning Instructions to merchant
You haven't entered any instructions.

Shipping address - confirmed
Ibrahim Yasir
Flat 4-G-02
Hulhumale
Male’, Maldives,
20057
Maldives Shipping details
The seller hasn’t provided any shipping details yet.
Description Unit price Qty Amount
XMP Bursters L8 x 1000 $233.00 USD 1 $233.00 USD

Subtotal $233.00 USD
Total $233.00 USD

Payment $233.00 USD
Charge will appear on your credit card statement as "PAYPAL"

Issues with this transaction?
You have 180 days from the date of the transaction to open a dispute in the Resolution Center.

Questions? Go to the Help Center at www.paypal.com/mv/help.

You can receive plain text emails instead of HTML emails. To change your Notifications preferences, log in to your account, go to your Profile, and click My settings"

Delete


by an anonymous user from: Gyeongsan-si, Gyeongsangbuk-do, South Korea

I got same email on 13 of may... I think its a phishing email.

Delete


by an anonymous user from: Yahualica de González Gallo, Jalisco, Mexico

same on may 12th 2018, from this email: soppm-gsmithjr.com

Delete


by an anonymous user from: Chía, Cundinamarca, Colombia

Got exactly the same email

Delete


by an anonymous user from: Bangkok, Thailand

Me too. I got the same mail.

Delete


by an anonymous user from: Helsinki, South Finland, Finland

Got one:

"Hello -,

You sent a payment of $233.00 USD to Chris Arning

We assume that your account wasn't used by you Your transaction is being reviewed because our system has detected that you are using a new unknown device.

You can Cancel this transaction.
It may take a few moments for this transaction to appear in your account.

Merchant
Chris Arning Instructions to merchant
You haven't entered any instructions.

Shipping address - confirmed
Ibrahim Yasir
Flat 4-G-02
Hulhumale
Male’, Maldives,
20057
Maldives Shipping details
The seller hasn’t provided any shipping details yet.
Description Unit price Qty Amount
XMP Bursters L8 x 1000 $233.00 USD 1 $233.00 USD

Subtotal $233.00 USD
Total $233.00 USD

Payment $233.00 USD"

Delete


by info

Here is another scam:

"From: adidas_588266-mail-zg367.getresponse.com on behalf of Adidas
Sent: Monday, April 30, 2018 11:18 AM
Subject: You've sent a payment

Apr 30, 2018
Transaction ID: O-15D0183K9861W

Dear ,
You've sent a payment of 129.00 EUR to Adidas.com
Thanks for using PayPal. Please note that this is not a charge. Your account will be charged when the merchant processes your payment. You may receive multiple emails as the merchant processes your order.

Your funds will be transferred when the merchant processes your payment. Any money in your PayPal account at that time will be used before any other payment source.

It may take a few moments for this transaction to appear in your account.

Merchant
Adidas.com.
support-adidas.com Instructions to merchant
You haven't entered any instructions.

You can cancel this transaction :
Cancel Payment Now >"

Delete


by an anonymous user from: Barcelona, Catalonia, Spain

Service Customer This email adress sent me this message.

Delete


by an anonymous user from: Regina, Saskatchewan, Canada

I just received this. Glad I googled and glad this site is here. I didn't click the "Cancel it" button

"Transactions Support support-pay-transactions.com via mail-zg367.getresponse.com
8:12 PM (11 hours ago)

April 23, 2018
Transaction ID: 05SEP27A06F5
Dear Client

You have sent a payment of 183.00 $ to louisvuitton.com (seller-louisvuitton.com)

This transaction is being under review because our system has detected that you are using a new unknown device.

We assume that your account wasn't used by you


You can cancel this transaction : Cancel it

It may take a few moments for this transaction to appear in your account.

Website
louisvuitton.com Note to seller
You haven't included a note.
Shipping address - confirmed
CavallinI katys
Rue Léon Castilhon 8/2
6700, Léaige
Belgique Shipping details
The seller hasnt provided any shipping details yet.
Description Unit price Qty Amount
KASAI CLUTCH M42838 Monogram Macassar Canvas

183.00 $

Insurance - not offered ----
Total 183.00 $
Payment 183.00 $

Payment sent to seller-louisvuitton.com

Thank you for your time
27Hamlyn Drive, Hu46by, Hull, United Kingdom

Vous pouvez vous désabonner ou modifier vos coordonnées à tout moment.

Optimisé par:
GetResponse"

Delete


by info

Here is another scam:

"From: PaypaI Service
Date: February 11, 2018 at 11:49:31 AM CST
To: undisclosed-recipients:;
Subject: RE : New - [ Order Confirmation ] Receipt Payment from e-Gift card [ Item ID #A8293OP8273 ]

Thank you for your order

Please refer to Invoice in the form (PDF) we provide. do a confirmation or follow the steps we provide on the Invoice we referred to in (PDF), because there are different state of your account login Please Confirm and I will wait in 24 hours.

Thank You . Sincerely.
PayPal

Copyright © Paypal Inc. All rights reserved.
Privacy Policy Terms of Use Sales and Refund "

Delete


by an anonymous user from: Lausanne, Vaud, Switzerland

Here is another scam:

"You have sent a payment of 321.00 CHF to Solomon Marce
Your transaction is being reviewed because our system has detected that you are using a new unknown device.

We assume that your account wasn't used by you

You can refund this transaction : Cancel Now>"

Delete


by info

Here is another scam:

"Amelie just sent you $8,892.00 USD with Paypal. Paypal recommends to withdraw it now.

Amelie
Fri 1/19/2018, 7:51 AM

This message was identified as spam. We'll delete it after 10 days. It's not spam
Amelie just sent you $8,892.00 USD with Paypal.

Click here to continue

Best of luck!
Amelie"

Delete


by info

Here is another scam:

"From: Support [mailto:admin-host.indicom.dk]
Sent: Sunday, January 07, 2018 7:20 PM
Subject: [ PayPal ] : You have sent a payment of 83.00 EUR to louisvuitton.com

Janvier 07, 2018
Transaction ID: 07Jan18A06F5

Dear Customer

You have sent a payment of 83.00 EUR to louisvuitton.com (hello-louisvuitton.com)

Your transaction is being reviewed because our system has detected that you are using a new unknown device.

We assume that your account wasn't used by you

You can cancel this transaction : Cancel it
It may take a few moments for this transaction to appear in your account.

Website
louisvuitton.com

Note to seller
You haven't included a note.

Shipping address - confirmed
Cavallini katys
Rue Leon Castilhon 8/2
6700, Arlon
Belgique

Shipping details
The seller hasnt provided any shipping details yet.

Description Unit price Qty

Amount

KASAI CLUTCH M42838 Monogram Macassar Canvas

83.00 EUR 1 83.00 EUR

Insurance - not offered

----

Total 83.00 EUR Payment 83.00 EUR


Payment sent to hello-louisvuitton.com

Thank you for your time"

Delete


by an anonymous user from: Pleven, Bulgaria

I've got the same email 4 days ago. Fkin' scammers.

Delete


by info

Received via email:

"Dear PayPal ,

I have just received this fake e-mail. I'm sharing it to know about it and try to protect your users from such tricks.

Hey beloved user,
Thank you for ordering! We need a number of destinations for your new order with us, When we have your order ready, you can open us and let us know if a change is needed (view) to save or save (link) to your device. Thank you, PayPaI

PayPaI
You sent a payment $59.00 USD to ApsclubStore
Transaction ID : PYPL93HD93J1
38mm Midnight Blue Sport Band - S/M &
M/L
#287298372
$59.00 USD
Tax $0.00 USD
$59.00 USD
Shipping Address
Rudolf Paimos

27 Matthew Street Merrylands
Sydney, NSW 2160
AUS

If this not your transaction, we will help the process of recovery
refund and protect your account. press the button bellow
PayPaI ID Summary • Purchase History • Terms of Sale • Privacy Policy

Copyright © 2017PayPaI Pty Ltd.
All rights reserved
RECOVER MY ACCOUNT
Jan 6 , 2018 9:19:06 PM"

Delete


by info

Here is another scam:

----- Forwarded Message -----
From: PayPaI
Sent: Thursday, November 30, 2017, 6:25:42 AM PST
Subject: You sent a payment of $33.00 USD

PayPal Transaction ID: 463963215J741423X

Dear Client,

You sent a payment of $33.00 USD to Patreon

It may take a few moments for this transaction to appear in your account.

Merchant Instructions to merchant
Patreon You haven't entered any instructions.
noreply-patreon.com
IDX9588736trx23.

Description Unit Price Amount

Patreon Pledge Processing $33.00 USD
$33.00 USD

Sub Total $33.00 USD Total $33.00 USD

Charge will appear on your credit card statement as "PAYPAL *PATREON"
Payment sent to epay-patreon.com

Invoice ID: charge54094890

Issues with this transaction?
You have 1 day from the date of the transaction to open a dispute in the Resolution Center.

Please Click link below to dispute transaction :
https.://paypal.com/resolution-center/

Best Regards,
PayPal"

Delete


by an anonymous user from: Ashburn, Virginia, United States

Glad they only got you for $33, They took $460 from me in a single charge

Delete


by info

Here is another scam:

--start of scam--
"From: PayPal Support
Sent: Thursday, October 12, 2017 11:15 AM
Subject: You sent a payment

PayPal

You sent a payment

Transaction ID: 8US6957535286120

Dear Client,

You sent a payment for $200.00 USD to synvengeance-outlook.com.
Please note that it may take a little while for this payment to appear in the Recent Activity list on your Account Overview.
View the details of this transaction online

If it was not you who did this transaction please protect your account, and dispute the transaction by clicking Resolve Now

Amount you have sent: $200.00 USD
Sent on: October 12 2017
Message in your payment email: For your school fee.
Sincerely,
PayPal"

Delete


by an anonymous user from: Lille, Hauts-de-France, France

Hello,

I don't possess a Paypal account but I wasn't sure if someone in my family could have used my email address to make one, so I made it to the "trouble logging" in their fake page where you have to log and, obviously, (I don't have a PayPal account) it didn't work (account inexistent) but can I still have problem now ? That they know my email address? Sorry for the bad English by the way.

Delete


by info

They will be sending fraudulent or fake email messages in an attempt to trick you into sending them money and/or personal information. Therefore, just be careful of email messages that ask you to send money or personal information.

Delete


by info

Here is another scam:

"From: PayPal Payment <8t0361.486733_187s8-csus.edu>
Subject: You sent a payment - Transaction ID:DD4A4050321C021F4D
Date: May 5, 2017 at 4:23:15 PM GMT 2
Resent-From:

You sent a payment
5 May 2017 07:88:98 BST Transaction ID:706E11BFA7005B0529

You sent a payment of 14.22 CAD to NBA JAM by EA SPORTS™.
Thanks for using Paypal. To see all the transaction details log in to your PayPal account.
It may take a few moments for this transaction to appear in your account.

This email confirms your purchase of the following subscription using your PayPalID ():

Subscription name: NBA JAM by EA SPORTS™.
Date of purchase: Friday, 05 May 2017
Subscription Period: 5 months
Unit price: 14.22 CAD "

Delete


by an anonymous user from: Zavyalovskiy rayon, Siberian Federal District, Russia

Here is another phishing scam that recipients should delete:

"Transaction Number : 8421N2481O54731z

You sent a payment in the amount of 220.20USD ? OVH S.A.R.L (reservation2016-corsicaferres .com)

It Is possible That the transaction appears after a few minutes on your account.

Having problèmes with This transaction ?

You have a période of 24 hours from the date of the transaction to cancel the payment.

*Enter all your personal information to your account!!

Click here to cancel the payment immediately"

Delete


by an anonymous user from: Lisbon, Portugal

Here is another scam:

"Transaction Number: 8441N2481P54741z

Hello,

You sent a payment in the amount of 119.20 EUR ? OVH S.A.R.L (reservation2016-corsicaferres.com)

It Is possible That the transaction appears after a few minutes on your account.

Having problèmes with This transaction ?

You have a période of 24 hours from the date of the transaction to cancel the payment.

*Enter all your personal information to your account!"

Delete


by an anonymous user from: Fremont, California, United States

Here is another scam:

"PayPal : You sent a payment in the amount of (EUR) 119.20 ? OVH S.A.R.L !.‏
iprosess line
Today, 12:57 PM

PayPal
Transaction Number : 8441N2481P54741z

Hello,

You sent a payment in the amount of 119.20 EUR ?

It Is possible That the transaction appears after a few minutes on your account.

Having problèmes with This transaction ?

You have a période of 24 hours from the date of the transaction to cancel the payment.

*Enter all your personal information to your account !

Click here to cancel the payment immediately"

Delete


by info

Here is another scam:

"From: support-Inc service [mailto: costomerInc-eserviceLogine.onmicrosoft.com]
Sent: Monday, August 22, 2016 10:46 PM
Subject: PayPal : Having problemes with This transaction?

Transaction Number : 8441N2481P54741z

Hello,

You sent a payment in the amount of EUR 119.20 ? OVH S.A.R.L (reservation2016-corsicaferres.com)

It Is possible That the transaction appears after a few minutes on your account.

Having problèmes with This transaction ?

You have a période of 24 hours from the date of the transaction to cancel the payment."

Delete


by an anonymous user from: Fremont, California, United States

I got this same email.

Delete


by an anonymous user from: Bengaluru, Karnataka, India

Received following email scam:

"Welcome!,

You sent a payment of an amount of € 63.20? OVH S.A.R.L (reservation2017-corsicaferres.com)

It is possible that the transaction does not appear after a few minutes on your account.
You encounter any problems with this transaction ?
You have a period of 24 hours from the date of the transaction cancel Payment.
*Enter your personal information from your credit card

Click here to cancel payment immediately

* Please do not respond to this e-mail. This mailbox does not being consulted, you will receive no answer. For assistance, log in to your PayPal account and click Aide top right of any page PayPal."

Delete


waiting