"We're Investigating Transaction Activity" PayPal Phishing Scam

Persons who have already fallen victim to the phishing scam should change their PayPal passwords immediately before their accounts are hijacked, and contact PayPal for help.

The Phishing PayPal Email Message

From: PayPal <user4@30072016.store>
Subject: We're investigating transaction activity. (noPP-003-413-288-240)‏
Reply-To: user4@30072016.store

Dear Customer,

We need your help resolving an issue with your ΡayΡal account. Until you help us resolve this issue, we've temporarily limited what you can do with your account. Take a momment to review your account information and recent transactions for changes or unknown payment. If you see a payment you don't recognise, go to the Resolution Center and report it by clicking "Dispute a Transaction"

Your account has been limited because money activity below:

Seller's Name : Thomas Grey (US)

Transaction ID : 1N505927C30763739

Transaction Amount : -$50.00

Case Number : PP-003-413-288-240

Please log in to your ΡayΡal account and provide the requested information through the Resolution Center.

Login to your account

PROTECT YOUR PASSWORD

Never share your password with anyone.

Create passwords that are hard to guess and don't use personal information. Include upper-case and lower-case letters, numbers and symbols.

Use different passwords for each of your online accounts.

Thank you for your understanding and cooperation. If you need further assistance, please click Contact at the bottom of any ΡayΡal page.

Sincerely,

ΡayΡal

The link in the phishing PayPal email message goes to a fake PayPal Website.

It is important for PayPal users to remember that they should never sign into their accounts by clicking on a link. They should always go directly to www.paypal.com and sign-in from there instead.

Note: Some of the names, addresses, email addresses, telephone numbers or other information in samples on this website may have been impersonated or spoofed.