Online Threat Alerts (OTA) - Alerting you to scams and frauds.
PayPal users who have received fake PayPal receipt email confirmations like the one below, which claim their Calvin Klein order has been shipped and they can click on a link in the same email messages to cancel the order, should delete the same email messages. This is because the fake email messages are being sent by cyber criminals to trick recipients into clicking on the links in them, which go to a phishing website that steals PayPal account credentials, personal and financial information.
PayPal users who have already been tricked by the phishing scam are asked to change their PayPal password, check their accounts for discrepancies and contact PayPal for help. And, PayPal users should never click on a link to sign into their accounts. They should instead, go directly to www.paypal.com, sign-in and check their accounts for any discrepancy.
Subject: Your Calvin Klein Order #29680109 Has ShippedFrom: service@paypaI.com <siderotaminopo_pa8783498934ni@authcloud-desk.com>Dear,The following items from your order have shipped.Thank you for shopping at calvinklein.com.View your account for a detailed summary of this order. Tracking Information is available within 24 hoursIf you want to cancel this order? Cancel Orders NowORDER NUMBER: 29680109 ORDER DATE: August 18, 2017SHIPPING ADDRESS:William Walker IV18 Grand AvenueCumberland, MD US 21502BILLING ADDRESS:William Walker IV18 Grand AvenueCumberland, MD US 21502BILLING METHOD:PayPaIfatta77@hotmail.com THESE ITEMS SHIPPED ON: AUGUST 20, 2017SHIPPING METHOD: GROUNDRODUCTS QTY EACH TOTALX FIT ULTRA SLIM FIT BLACK SUITCOLOR: BLACKSIZE: 46 REGULARITEM NO. 24550027
Subject: Your Calvin Klein Order #29680109 Has Shipped
From: service@paypaI.com <siderotaminopo_pa8783498934ni@authcloud-desk.com>
Dear,
The following items from your order have shipped.
Thank you for shopping at calvinklein.com.
View your account for a detailed summary of this order. Tracking Information is available within 24 hours
If you want to cancel this order? Cancel Orders Now
ORDER NUMBER: 29680109 ORDER DATE: August 18, 2017
SHIPPING ADDRESS:
William Walker IV
18 Grand Avenue
Cumberland, MD US 21502
BILLING ADDRESS:
BILLING METHOD:
PayPaI
fatta77@hotmail.com
THESE ITEMS SHIPPED ON: AUGUST 20, 2017
SHIPPING METHOD: GROUND
RODUCTS QTY EACH TOTAL
X FIT ULTRA SLIM FIT BLACK SUIT
COLOR: BLACK
SIZE: 46 REGULAR
ITEM NO. 24550027
Check the comment section below for answers or additional information. Share what you know, or ask a question about this article by leaving a comment below.
Online Threat Alerts (OTA) is not affiliated with or endorsed by any trademark owner mentioned in this article. Some of the information in samples in this article may have been impersonated or spoofed.
27
One more.I have bought two light tickets several days ago.I've receive:"Dear e-mail adress:You have sent a payment of 452.00 USD to calvinklein.com (hello-calvinklein.com)Your transaction is being reviewed because our system has detected that you are using a new unknown device. We assume that your account wasn't used by you You can cancel this transaction : Cancel it It may take a few moments for this transaction to appear in your account. Websitecalvinklein.com Note to sellerYou haven't included a note.Shipping address - confirmedAtanas AtanasovosmI primorskI polk 786700, VarnaBulgaria Shipping detailsThe seller hasnt provided any shipping details yet. Description Unit price Qty AmountFleece and cotton fleece hoodie452.00 USD1452.00 USD Insurance - not offered ----Total 452.00 USDPayment 452.00 USDPayment sent to hello-calvinklein.comThank you for your timeFray Junipero Serra 20, 46014, Valencia, SpainYou may unsubscribe or change your contact details at any time."
I received the same exact email (dated March 28, 2018).
I recieved the exact same email, very good work on thier part. I can see how some people get taken. Is there anything that can be done other than mark spam?
I just got the same message. Right before that, my phone asked for me to update to check what wifI devices I had connected.
Ditto - I just got an email just like this.
I got this email like that. Did not click on anything. Look at the address at the bottom - weird. It is a real house in Virginia, not NV. There is no calvinklein.comThere were several links within email. Didn't mention PayPal. I would not pay $452.00 for a sweatshirt either"March 16, 2018Transaction ID: 26JHN18A06F5Dear x-hotmail.com You have sent a payment of 452.00 USD to calvinklein.com (hello-calvinklein.com)Your transaction is being reviewed because our system has detected that you are using a new unknown device. We assume that your account wasn't used by you You can cancel this transaction : Cancel itIt may take a few moments for this transaction to appear in your account. Websitecalvinklein.com Note to sellerYou haven't included a note.Shipping address - confirmedAtanas AtanasovosmI primorskI polk 786700, VarnaBulgaria Shipping detailsThe seller hasnt provided any shipping details yet. Description Unit price Qty AmountFleece and cotton fleece hoodie 452.00 USD1452.00 USD Insurance - not offered ----Total 452.00 USDPayment 452.00 USDPayment sent to hello-calvinklein.com Thank you for your time120 Tuckahoe drive, Newport news, NV 23606, United StatesYou may unsubscribe or change your contact details at any time."
This has started making the rounds again... March 2018.Exact same MO, no payment method but with link to click and cancel.No name just Dear (Email Address) <- First indication that this is fake/maliciousNo payment method indicated
Same here got one today for the first time 17/03/2018. Checked my bank account info and no payments deducted.
I received the same type of email this morning. No mention of PayPal but a link to cancel a payment that the email suggests wasn’t made by me. It does display a shipping address in Bulgaria which I assume is fictitious
I also got an email today from Calvin Klein for $452 usd for Fleece and cotton fleece hoodie. Of course deleted it.
I received the following today in the Netherlands:"March 16, 2018Transaction ID: 26JHN18A06F5Dear..You have sent a payment of 452.00 USD to calvinklein.com (hello-calvinklein.com)Your transaction is being reviewed because our system has detected that you are using a new unknown device. We assume that your account wasn't used by you You can cancel this transaction : Cancel it It may take a few moments for this transaction to appear in your account. Websitecalvinklein.com Note to sellerYou haven't included a note.Shipping address - confirmedAtanas AtanasovosmI primorskI polk 786700, VarnaBulgaria Shipping detailsThe seller hasnt provided any shipping details yet. Description Unit price Qty AmountFleece and cotton fleece hoodie 452.00 USD 1 452.00 USD Insurance - not offered ----Total 452.00 USDPayment 452.00 USDPayment sent to hello-calvinklein.comThank you for your timeFray Junipero Serra 20, 46014, Valencia, Spain You may unsubscribe or change your contact details at any time. Powered by:"
Also got it this morning. Signaled as spam and deleted."You have sent a payment of 452.00 USD to calvinklein.com (hello-calvinklein.com)Your transaction is being reviewed because our system has detected that you are using a new unknown device. We assume that your account wasn't used by you You can cancel this transaction : Cancel itIt may take a few moments for this transaction to appear in your account. Websitecalvinklein.com Note to sellerYou haven't included a note.Shipping address - confirmedAtanas AtanasovosmI primorskI polk 786700, VarnaBulgaria Shipping detailsThe seller hasnt provided any shipping details yet. Description Unit price Qty AmountFleece and cotton fleece hoodie452.00 USD1 452.00 USD Insurance - not offered ----Total 452.00 USDPayment 452.00 USDPayment sent to hello-calvinklein.com Thank you for your time"
I got this two days ago:"March 14, 2018Transaction ID: 26JHN18A06F5Dear frank-romny.dk You have sent a payment of 263.00 EUR to calvinklein.com (hello-calvinklein.com)Your transaction is being reviewed because our system has detected that you are using a new unknown device. We assume that your account wasn't used by you You can cancel this transaction : Cancel it It may take a few moments for this transaction to appear in your account. Websitecalvinklein.comNote to sellerYou haven't included a note.Shipping address - confirmedAtanas AtanasovosmI primorskI polk 786700, VarnaBulgaria Shipping detailsThe seller hasnt provided any shipping details yet. Description Unit price Qty AmountFleece and cotton fleece hoodie 263.00 EUR1 263.00 EURInsurance - not offered ----Total 263.00 EURPayment 263.00 EURPayment sent to hello-calvinklein.comThank you for your time"
I also got the Atanas email for around $600 for fleece shirts today. Deleted.They claim they suspect it's not me who put the order, had to click on a link to cancel (didn't of course), didn't say anything about payment method.Sweden.
Hi,I just received it this morning and it seem they have compromised a Webalizer page. The "Cancel it" redirects to hxxps://oneworld.ro/stats/wait.html and I have informed the people at that website.//Tomas
Hi,I got the Atanas for $452 for a fleece email too this morning. Deleted. Netherlands
Got same email from Atanas for $452 usd for Fleece and cotton fleece hoodie. Good thing I googled this. I will delete as well. Vancouver, canada
I received almost the same email with the same dollar amount and item. It came from service and was supposedly for CalvinKlein.com Glad that I also googled this!Seattle, WA
Same here. Deleted it.
This is what I received:"Dear ******* 8 Mar at 9:09 PMYou have sent a payment of 163.00 EUR to calvinklein.com (seller-calvin-klein.com)Your transaction is being under review, our system has detected that you are using a new unknown device. We assume that your account wasn't used by you You can cancel this transaction : Cancel It may take a few moments for this transaction to appear in your account.Websitecalvinklein.com Note to sellerYou haven't included a note.Shipping address - confirmedAtanas AtanasovosmI primorskI polk 786700, VarnaBulgaria Shipping detailsThe seller hasnt provided any shipping details yet. Description Unit price Qty AmountFleece and cotton fleece hoodie163.00 EUR3163.00 EUR Insurance - not offered ----Total 163.00 EURPayment 163.00 EURPayment sent to seller-calvin-klein.comThank you for your time"
Same with me to today.Portugal
Hi, today 08.03.2018 I have got a similar mail:"You have sent a payment of 325.00 AUD to calvinklein.com (hello-calvinklein.com)Your transaction is being reviewed because our system has detected that you are using a new unknown device. We assume that your account wasn't used by you You can cancel this transaction : Cancel itShipping address - confirmedAtanas AtanasovosmI primorskI polk 786700, VarnaBulgaria"Best, Ulrich
YES - thank you for being here to confirm. I received such an email on 2/9/2018. I didn’t click on any links - googled for Calvin Klein scam and found you. Thank you again!KP from Colorado
Same here. Deleted. Thanks for warning
Yep -- I got one of these. clicked on one link that took me to Calvin Klein site that was legit, but did not click on the cancellation link. Was for a "fleece and cotton fleece hoodie 263.00 USDSaid it was going to: Atanas AtanasovosmI primorskI polk 786700, VarnaBulgaria
Yes, I got exact the same message. Thanks for the alert
I just received it to.