PayPal users who have received email messages claiming that their accounts have been limited are asked not to follow the instructions in them. This is because the fake emails are phishing scams being sent by online scammers, and not by PayPal. The aim of the scammers is to steal the recipients' PayPal usernames, passwords and credit card information, which they(scammers) will use to hijack their accounts and use them fraudulently.
The "PayPal Your Account has been Limited" Scam
From: Service-PayPal@account.com <abuse-newreportedusertemporary043- notrpletasdthisemailkontoldeasdqwcomhretyopig @accountlockedsaccessbefore- reportloginstatmentprimaryprivacypolicesecured -noticetopaypal.com. account.live.com>
Date: 17 August 2017 at 19:08:22 BST
Subject: [Summary Report Reminder]: Statement Account LIMITED (Your Case ID Number: PP-002-604-197-124).
Case ID Number: PP-002-604-197-123
Dear,
Your account has limited until we hear from you.
We regularly check the activity of your PayPal account. Recently, we found that some of the activities you are violating your agreement with us. Therefore, we have locked your account and can not offer the service for you.
What can i do?
Update account information
Using PayPal logo in the list of auction or website
What can't i do?
Send or received money
Withdraw money from your account
Add or remove a cards & bank account
Dispute a transaction
What to do next?
You have 2 days from the date of your PayPal restrictions to fully restore your account access through the Resolution Center. If we don't receive the information before this deadline, your account access may be further limited.
Resolution Center
If the instructions in the phishing scam are followed, the potential victims will be taken to a fake PayPal website and ask to sign-in with their PayPal usernames and passwords. They will then be asked to update their credit card information by entering it on the bogus PayPal page.
All the information entered on the bogus PayPal page will be sent to the online scammers behind the scam. Once they have their potential victims' PayPal credentials, they use it to hijack their accounts and use them fraudulently. This includes stealing money from their accounts, using their PayPal accounts and credit cards to make fraudulent purchases. Victims who have already entered their PayPal user names, passwords and credit card information on the fake website are asked to change their PayPal password and contact PayPal and their bank immediately for help.
Please note that PayPal will always address their users by name and will never refer to them using the following:
- Dear [Email Address]
- Dear PayPal customer
- Dear Valued Customer
- Dear Member
- Dear User
- Dear Customer
To avoid getting tricked by these phishing scams, PayPal users are asked never to click on a link in an email message to sign into their PayPal accounts. They should always go to www.paypal.com and sign into their accounts from there. After signing in, PayPal will display important messages or notifications to them.