PayPal users who have received email messages like the one below, which claim that a suspicious order activity has been noticed on their accounts and they need to sign-in order prevent their account from being limited, are asked not to click on the link in the email message. This is because the link or button in the fake email messages go to a phishing website looking similar to PayPal's website, where visitors will be asked to sign into with their PayPal account. But, any attempts to sign into the fake PayPal website will send the visitors' PayPal credentials to the cybercriminals behind the phishing scam, who will hijack the accounts and use them fraudulently.
The "PayPal New Order Suspicious Activity" Phishing Scam
Re : Reminder: [New Statement Update] : We have reported new order activity 11/12/2017
PayPal Service <cok.0@support-account-update.solutions>
service@intl.paypal.com
PayPal
Suspicious Activity
Hello,
Dear Customer,
Monday, December 11, 2017 (EST), We noticed a successful sign in to your PayPal account from an unrecognized device in Buenos Aires, Argentina.
You must be verified before it can be used to recover your account. If you have not completed verification, your account will be limited, please visit:
https://www.paypal.com/resolve/update?id=usr_num113834> &actin=_resolve-pp-0987-98749-2212
Sincerely,
PayPal
Go to Your Account
This is why it is important that PayPal users remember never to click on a link to sign into their accounts. They should always go directly to www.paypal.com and sign-in from there instead. Once they have signed into their accounts they will be notified of changes and other important updates if there is any.This will prevent them from becoming victims of phishing scams, where cyber criminals steal their credentials, hijack their accounts, steal their money, and use their accounts fraudulently.
PayPal users who have already been tricked by a phishing scam, are asked to change their passwords and contact PayPal immediately for help.