"We're Investigating a Payment" PayPal Phishing Scam

"We're Investigating a Payment" PayPal Phishing Scam

Would you share this Article with others?

The email message below with the subject: "We're investigating a payment," which states that an unauthorized account activity claim was recently filed against a transaction, see email below for transaction information, is a phishing scam. The fake or fraudulent email message was created by cyber-criminals to trick the recipients into clicking on one of the links in it, which will take them to the fake and phishing website. The fake and phishing website, which looks exactly like the legitimate PayPal website, should not be visited and the instructions on it should never be followed, because any information submitted on it will be sent to the cyber-criminals, who will use it to hijack their victims' PayPal accounts.

Persons who have already fallen victim to the phishing scam should change their PayPal passwords immediately before they are hijacked, and check their accounts for discrepancies.

The PayPal Phishing Email Message

De : PayPal [mailto: service@tman.com .tw]
Envoyé : samedi 4 juin 2016 18:59
Objet : [***] We're investigating a payment


Dear customer,

An unauthorized account activity claim was recently filed against the following transaction.

Transaction ID: 2LS19057UE780664F
Transaction date: june 03 2016
Transaction amount: 60,01 EUR
Invoice ID: 100031167
Your transaction ID: 2YM006313T164944A
Case number: PP-004-776-376-037


We need additional information from you within the next 7 days. Please log in to your PayPal account and go to the Resolution Center to see the details of this case. There, you can enter any information regarding this case that will help us fight the reversal on your behalf.


The link in the phishing PayPal email message goes to the following fake PayPal website:
http://redirect-paypal.com-userid-confirm- 23847ushnb928300- complete-account. apple-icloud- onclick.ga/

Note: cybercriminals will use other websites.

It is important for PayPal users to remember that they should never sign into their accounts by clicking on a link. They should always go directly to www.paypal.com and sign-in from there instead.

Note: Some of the names, addresses, email addresses, telephone numbers or other information in samples on this website may have been impersonated or spoofed.

Please share what you know or ask a question about this article by leaving a comment below. Check the comment section below for additional information, if there is any. Remember to forward suspicious, malicious, or phishing email messages to us at the following email address: info@onlinethreatalerts.com. And, report missing persons, scams, untrustworthy, or fraudulent websites to us. Tell us why you consider the websites untrustworthy or fraudulent. Also, to quickly find answers to your questions, use our search engine.

You can help maintain Online Threat Alerts (OTA) by paying a service fee. Click here to make payment.

Comments, Questions, Answers, or Reviews
(Total: 1)

To help protect your privacy, please do not post or remove, your full name, telephone number, email address, username, password, account number, credit card information, home address or other sensitive information in or from your comments, questions, or reviews.

The comments, reviews or answers below do not necessarily reflect the views of Online Threat Alerts.

  • February 6, 2017 at 10:50 AM by info

    Here is another scam:

    "From: PayPal <conservator@inboknyasusah.cf>

    Subject: We're investigating recent payment activity. Case ID (PP-001-998-278-384).

    Date: January 29, 2017 at 9:20:51 AM EST

    Reply-To: conservator@inboknyasusah.cf


    We need your help resolving an issue with your ΡayΡal account.

    Until you help us resolve this issue, we've temporarily limited what you can do with your account.

    Take a momment to review your account information and recent transactions for changes or unknown payment.

    If you see a payment you don't recognise, go to the Resolution Center and report it by clicking "Dispute a Transaction".

    Here are the details of this case:

    Seller's Name : Roberto Shoes (UK)

    Transaction ID : 2IB6AH60M8252JKA2

    Transaction amount : £62.92 GBP

    Please log in to your ΡayΡal account and provide the requested information through the Resolution Center.

    Login to your account


    Never share your password with anyone.

    Create passwords that are hard to guess and don't use personal information. Include upper-case and lower-case letters, numbers and symbols.

    Use different passwords for each of your online accounts.

    Thank you for your understanding and cooperation. If you need further assistance, please click Contact at the bottom of any ΡayΡal page.



    Copyright 1999-2017 ΡayΡal. All rights reserved."


 Show More Comments (1)
Write Your Comment, Question, Answer, or Review
Write your comment, question, answer, or review in the box below to share what you know or to get answers. NB: We will use your IP address to display your approximate location to other users.
Your comment, question, answer, or review will be posted as an anonymous user because you are not signed in. Anonymous posts cannot be edited or deleted. Sign-in.

"We're Investigating a Payment" PayPal Phishing Scam