Warning! JavaScript is turned off or disabled! Some features on this website will not work.

Beware of "We're Investigating a Payment" PayPal Phishing Scam

Beware of "We're Investigating a Payment" PayPal Phishing Scam

The email message below with the subject: "We're investigating a payment," which states that an unauthorized account activity claim was recently filed against a transaction, see email below for transaction information, is a phishing scam. The fake or fraudulent email message was created by cyber-criminals to trick the recipients into clicking on one of the links in it, which will take them to the fake and phishing website. The fake and phishing website, which looks exactly like the legitimate PayPal website, should not be visited and the instructions on it should never be followed, because any information submitted on it will be sent to the cyber-criminals, who will use it to hijack their victims' PayPal accounts.

Please continue below.

Persons who have already fallen victim to the phishing scam should change their PayPal passwords immediately before they are hijacked, and check their accounts for discrepancies.

The PayPal Phishing Email Message

De : PayPal [mailto: service@tman.com .tw]
Envoyé : samedi 4 juin 2016 18:59
Objet : [***] We're investigating a payment


Dear customer,

An unauthorized account activity claim was recently filed against the following transaction.

Transaction ID: 2LS19057UE780664F
Transaction date: june 03 2016
Transaction amount: 60,01 EUR
Invoice ID: 100031167
Your transaction ID: 2YM006313T164944A
Case number: PP-004-776-376-037


We need additional information from you within the next 7 days. Please log in to your PayPal account and go to the Resolution Center to see the details of this case. There, you can enter any information regarding this case that will help us fight the reversal on your behalf.


The link in the phishing PayPal email message goes to the following fake PayPal website:
http://redirect-paypal.com-userid-confirm- 23847ushnb928300- complete-account. apple-icloud- onclick.ga/

Note: cybercriminals will use other websites.

It is important for PayPal users to remember that they should never sign into their accounts by clicking on a link. They should always go directly to www.paypal.com and sign-in from there instead.

Please share with us what you know or ask a question about this article by leaving a comment below. Also, check the comment section below for additional information, if there is any.

Remember to forward suspicious, malicious, or phishing email messages to us at the following email address: info@onlinethreatalerts.com

If you want to quickly find answers to your questions, use our search engine.

Comments, Questions and Reviews
(Total: 1)

To help protect your privacy, please do not post or remove your full name, telephone number, email address, username, password, account number, credit card information or home address in your comments, questions, or reviews.

The comments or reviews below do not necessarily reflect the views of Online Threat Alerts.

  • Posted: Feb 6, 2017 by info

    Here is another scam:

    "From: PayPal <conservator@inboknyasusah.cf>
    Subject: We're investigating recent payment activity. Case ID (PP-001-998-278-384).
    Date: January 29, 2017 at 9:20:51 AM EST
    Reply-To: conservator@inboknyasusah.cf


    We need your help resolving an issue with your ΡayΡal account.

    Until you help us resolve this issue, we've temporarily limited what you can do with your account.

    Take a momment to review your account information and recent transactions for changes or unknown payment.

    If you see a payment you don't recognise, go to the Resolution Center and report it by clicking "Dispute a Transaction".

    Here are the details of this case:
    Seller's Name : Roberto Shoes (UK)
    Transaction ID : 2IB6AH60M8252JKA2
    Transaction amount : £62.92 GBP

    Please log in to your ΡayΡal account and provide the requested information through the Resolution Center.

    Login to your account

    Never share your password with anyone.

    Create passwords that are hard to guess and don't use personal information. Include upper-case and lower-case letters, numbers and symbols.

    Use different passwords for each of your online accounts.

    Thank you for your understanding and cooperation. If you need further assistance, please click Contact at the bottom of any ΡayΡal page.


    Copyright 1999-2017 ΡayΡal. All rights reserved."


Show More of the 1 Comments, Questions or Reviews

Write Your Comment, Question or Review

Write your comment, question or review in the box below to share what you know or to get answers. Please revisit after an hour or more to view reponses or answers to you questions.

Your comment, question or review will be posted as an anonymous user because you are not signed in. Sign-in.