- Popular
- Most Talked-About

Online Threat Alerts

An anti-cybercrime community alerting the public to web threats.

Online Threat Alerts»

Beware of "We're Investigating a Payment" PayPal Phishing Scam

Updated: June 6, 2016 2016-06-06T10:04:48 -
Posted: June 6, 2016 2016-06-06T09:56:05
Views: 1,469
Comments: 1

The email message below with the subject: "We're investigating a payment," which states that an unauthorized account activity claim was recently filed against a transaction, see email below for transaction information, is a phishing scam. The fake or fraudulent email message was created by cyber-criminals to trick the recipients into clicking on one of the links in it, which will take them to the fake and phishing website. The fake and phishing website, which looks exactly like the legitimate PayPal website, should not be visited and the instructions on it should never be followed, because any information submitted on it will be sent to the cyber-criminals, who will use it to hijack their victims' PayPal accounts.

Please continue reading below.

Persons who have already fallen victim to the phishing scam should change their PayPal passwords immediately before they are hijacked, and check their accounts for discrepancies.

The PayPal Phishing Email Message

De : PayPal [mailto: service@tman.com .tw]
Envoyé : samedi 4 juin 2016 18:59
Objet : [***] We're investigating a payment

PayPal

Dear customer,

An unauthorized account activity claim was recently filed against the following transaction.

Transaction ID: 2LS19057UE780664F
Transaction date: june 03 2016
Transaction amount: 60,01 EUR
Invoice ID: 100031167
Your transaction ID: 2YM006313T164944A
Case number: PP-004-776-376-037

LOGIN NOW

We need additional information from you within the next 7 days. Please log in to your PayPal account and go to the Resolution Center to see the details of this case. There, you can enter any information regarding this case that will help us fight the reversal on your behalf.

Thanks,
PayPal

The link in the phishing PayPal email message goes to the following fake PayPal website:
http://redirect-paypal.com-userid-confirm- 23847ushnb928300- complete-account. apple-icloud- onclick.ga/

Note: cybercriminals will use other websites.

It is important for PayPal users to remember that they should never sign into their accounts by clicking on a link. They should always go directly to www.paypal.com and sign-in from there instead.

Note: Some of the names, addresses, email addresses and telephone numbers in email samples on this website may have been impersonated.

Please share what you know or ask a question about this article by leaving a comment below. Also, check the comment section below for additional information, if there is any.

Remember to forward suspicious, malicious, or phishing email messages to us at the following email address: info@onlinethreatalerts.com

Also, report missing persons, scams, untrustworthy, or fraudulent websites to us. Tell us why you consider the websites untrustworthy or fraudulent.

If you want to quickly find answers to your questions, use our search engine.

Comments, Questions, Answers, or Reviews

(Total: 1)

To help protect your privacy, please do not post or remove, your full name, telephone number, email address, username, password, account number, credit card information, home address or other sensitive information in or from your comments, questions, or reviews. And, when you post a comment or review, we will use your IP address to display your approximate location to other users.

Please continue reading below.

The comments or reviews below do not necessarily reflect the views of Online Threat Alerts.

Feb 6, 2017 at 10:50 AM by info
Here is another scam:

"From: PayPal <conservator@inboknyasusah.cf>
Subject: We're investigating recent payment activity. Case ID (PP-001-998-278-384).
Date: January 29, 2017 at 9:20:51 AM EST
Reply-To: conservator@inboknyasusah.cf

Dear,

We need your help resolving an issue with your ΡayΡal account.

Until you help us resolve this issue, we've temporarily limited what you can do with your account.

Take a momment to review your account information and recent transactions for changes or unknown payment.

If you see a payment you don't recognise, go to the Resolution Center and report it by clicking "Dispute a Transaction".

Here are the details of this case:
Seller's Name : Roberto Shoes (UK)
Transaction ID : 2IB6AH60M8252JKA2
Transaction amount : £62.92 GBP

Please log in to your ΡayΡal account and provide the requested information through the Resolution Center.

Login to your account
PROTECT YOUR PASSWORD

Never share your password with anyone.

Create passwords that are hard to guess and don't use personal information. Include upper-case and lower-case letters, numbers and symbols.

Use different passwords for each of your online accounts.

Thank you for your understanding and cooperation. If you need further assistance, please click Contact at the bottom of any ΡayΡal page.

Sincerely,

ΡayΡal
Copyright 1999-2017 ΡayΡal. All rights reserved."
delete

Show More Comments (1)

Show all

Write Your Comment, Question, Answer, or Review

Write your comment, question or review in the box below to share what you know or to get answers. Please revisit after an hour or more to view reponses or answers to you questions.

Your comment, question or review will be posted as an anonymous user because you are not signed in. Sign-in.