"Your Calvin Klein Order Has Shipped" PayPal Receipt Cancellation Scams

Comments: 27
Views: 5,042
Save
Updated: Aug. 21, 2017 2017-08-21T23:26:25
Posted: Aug. 21, 2017 2017-08-21T23:20:18
Online Threat Alerts (OTA)

PayPal users who have received fake PayPal receipt email confirmations like the one below, which claim their Calvin Klein order has been shipped and they can click on a link in the same email messages to cancel the order, should delete the same email messages. This is because the fake email messages are being sent by cyber criminals to trick recipients into clicking on the links in them, which go to a phishing website that steals PayPal account credentials, personal and financial information.

PayPal users who have already been tricked by the phishing scam are asked to change their PayPal password, check their accounts for discrepancies and contact PayPal for help. And, PayPal users should never click on a link to sign into their accounts. They should instead, go directly to www.paypal.com, sign-in and check their accounts for any discrepancy.

A Sample of the "Your Calvin Klein Order Has Shipped" Scam

Subject: Your Calvin Klein Order #29680109 Has Shipped

From: service@paypaI.com <siderotaminopo_pa8783498934ni@authcloud-desk.com>

Dear,

The following items from your order have shipped.

Thank you for shopping at calvinklein.com.

View your account for a detailed summary of this order. Tracking Information is available within 24 hours

If you want to cancel this order? Cancel Orders Now

ORDER NUMBER: 29680109 ORDER DATE: August 18, 2017

SHIPPING ADDRESS:

William Walker IV

18 Grand Avenue

Cumberland, MD US 21502

BILLING ADDRESS:

William Walker IV

18 Grand Avenue

Cumberland, MD US 21502

BILLING METHOD:

PayPaI

fatta77@hotmail.com

THESE ITEMS SHIPPED ON: AUGUST 20, 2017

SHIPPING METHOD: GROUND

RODUCTS QTY EACH TOTAL

X FIT ULTRA SLIM FIT BLACK SUIT

COLOR: BLACK

SIZE: 46 REGULAR

ITEM NO. 24550027

Check the comment section below for additional information, share what you know, or ask a question about this article by leaving a comment below. And, to quickly find answers to your questions, use our search

engine.

Note: Some of the information in samples on this website may have been impersonated or spoofed.

Was this article helpful? +

Yes (1)
No (0)

Share this with others:

The comments, reviews or answers below do not necessarily reflect the views of Online Threat Alerts (OTA).

March 18, 2018 at 4:43 AM by an anonymous user from: Madrid, Spain
One more.
I have bought two light tickets several days ago.
I've receive:
"Dear e-mail adress:
You have sent a payment of 452.00 USD to calvinklein.com (hello@calvinklein.com)
Your transaction is being reviewed because our system has detected that you are using a new unknown device.
We assume that your account wasn't used by you
You can cancel this transaction : Cancel it
It may take a few moments for this transaction to appear in your account.
Website
calvinklein.com Note to seller
You haven't included a note.
Shipping address - confirmed
Atanas Atanasov
osmI primorskI polk 78
6700, Varna
Bulgaria Shipping details
The seller hasnt provided any shipping details yet.
Description Unit price Qty Amount
Fleece and cotton fleece hoodie
452.00 USD
1
452.00 USD
Insurance - not offered -
Total 452.00 USD
Payment 452.00 USD
Payment sent to hello@calvinklein.com
Thank you for your time
Fray Junipero Serra 20, 46014, Valencia, Spain
You may unsubscribe or change your contact details at any time."
remove
- March 27, 2018 at 10:15 PM by an anonymous user from: Winter Park, Florida, United States
  I received the same exact email (dated March 28, 2018).
  remove
- March 27, 2018 at 10:06 PM by an anonymous user from: Los Angeles, California, United States
  I recieved the exact same email, very good work on thier part. I can see how some people get taken. Is there anything that can be done other than mark spam?
  remove
- March 20, 2018 at 11:03 AM by an anonymous user from: North Richland Hills, Texas, United States
  I just got the same message. Right before that, my phone asked for me to update to check what wifI devices I had connected.
  remove
- March 20, 2018 at 11:02 AM by an anonymous user from: Littleton, Colorado, United States
  Ditto - I just got an email just like this.
  remove
March 17, 2018 at 8:30 PM by an anonymous user from: Pfafftown, North Carolina, United States
I got this email like that. Did not click on anything. Look at the address at the bottom - weird. It is a real house in Virginia, not NV. There is no calvinklein.com
There were several links within email. Didn't mention PayPal. I would not pay $452.00 for a sweatshirt either
"March 16, 2018
Transaction ID: 26JHN18A06F5
Dear x@hotmail.com
You have sent a payment of 452.00 USD to calvinklein.com (hello@calvinklein.com)
Your transaction is being reviewed because our system has detected that you are using a new unknown device.
We assume that your account wasn't used by you
You can cancel this transaction : Cancel it
It may take a few moments for this transaction to appear in your account.
Website
calvinklein.com Note to seller
You haven't included a note.
Shipping address - confirmed
Atanas Atanasov
osmI primorskI polk 78
6700, Varna
Bulgaria Shipping details
The seller hasnt provided any shipping details yet.
Description Unit price Qty Amount
Fleece and cotton fleece hoodie
452.00 USD
1
452.00 USD
Insurance - not offered -
Total 452.00 USD
Payment 452.00 USD
Payment sent to hello@calvinklein.com
Thank you for your time
120 Tuckahoe drive, Newport news, NV 23606, United States
You may unsubscribe or change your contact details at any time."
remove
March 16, 2018 at 12:05 PM by an anonymous user from: New Castle, Delaware, United States
This has started making the rounds again... March 2018.
Exact same MO, no payment method but with link to click and cancel.
No name just Dear (Email Address) <- First indication that this is fake/malicious
No payment method indicated
remove
- March 16, 2018 at 4:58 PM by an anonymous user from: Adelaide, South Australia, Australia
  Same here got one today for the first time 17/03/2018. Checked my bank account info and no payments deducted.
  remove
- March 16, 2018 at 4:52 PM by an anonymous user from: Sydney, New South Wales, Australia
  I received the same type of email this morning. No mention of PayPal but a link to cancel a payment that the email suggests wasn’t made by me. It does display a shipping address in Bulgaria which I assume is fictitious
  remove
March 16, 2018 at 5:01 AM by an anonymous user from: Otelfingen, Zurich, Switzerland
I also got an email today from Calvin Klein for $452 usd for Fleece and cotton fleece hoodie. Of course deleted it.
remove
March 16, 2018 at 3:47 AM by an anonymous user from: The Hague, South Holland, Netherlands
I received the following today in the Netherlands:
"March 16, 2018
Transaction ID: 26JHN18A06F5
Dear..
You have sent a payment of 452.00 USD to calvinklein.com (hello@calvinklein.com)
Your transaction is being reviewed because our system has detected that you are using a new unknown device.
We assume that your account wasn't used by you
You can cancel this transaction : Cancel it
It may take a few moments for this transaction to appear in your account.
Website
calvinklein.com Note to seller
You haven't included a note.
Shipping address - confirmed
Atanas Atanasov
osmI primorskI polk 78
6700, Varna
Bulgaria Shipping details
The seller hasnt provided any shipping details yet.
Description Unit price Qty Amount
Fleece and cotton fleece hoodie 452.00 USD 1 452.00 USD
Insurance - not offered -
Total 452.00 USD
Payment 452.00 USD
Payment sent to hello@calvinklein.com
Thank you for your time
Fray Junipero Serra 20, 46014, Valencia, Spain
You may unsubscribe or change your contact details at any time.
Powered by:"
remove
March 16, 2018 at 3:43 AM by an anonymous user from: Paris, Ile-de-France, France
Also got it this morning. Signaled as spam and deleted.
"You have sent a payment of 452.00 USD to calvinklein.com (hello@calvinklein.com)
Your transaction is being reviewed because our system has detected that you are using a new unknown device.
We assume that your account wasn't used by you
You can cancel this transaction : Cancel it
It may take a few moments for this transaction to appear in your account.
Website
calvinklein.com Note to seller
You haven't included a note.
Shipping address - confirmed
Atanas Atanasov
osmI primorskI polk 78
6700, Varna
Bulgaria Shipping details
The seller hasnt provided any shipping details yet.
Description Unit price Qty Amount
Fleece and cotton fleece hoodie
452.00 USD
1
452.00 USD
Insurance - not offered -
Total 452.00 USD
Payment 452.00 USD
Payment sent to hello@calvinklein.com
Thank you for your time"
remove
March 16, 2018 at 3:05 AM by an anonymous user from: Aalborg, North Denmark Region, Denmark
I got this two days ago:
"March 14, 2018
Transaction ID: 26JHN18A06F5
Dear frank@romny.dk
You have sent a payment of 263.00 EUR to calvinklein.com (hello@calvinklein.com)
Your transaction is being reviewed because our system has detected that you are using a new unknown device.
We assume that your account wasn't used by you
You can cancel this transaction : Cancel it
It may take a few moments for this transaction to appear in your account.
Website
calvinklein.com
Note to seller
You haven't included a note.
Shipping address - confirmed
Atanas Atanasov
osmI primorskI polk 78
6700, Varna
Bulgaria Shipping details
The seller hasnt provided any shipping details yet.
Description Unit price Qty Amount
Fleece and cotton fleece hoodie 263.00 EUR
1 263.00 EUR
Insurance - not offered -
Total 263.00 EUR
Payment 263.00 EUR
Payment sent to hello@calvinklein.com
Thank you for your time"
remove
March 16, 2018 at 2:48 AM by an anonymous user from: Stockholm, Stockholm County, Sweden
I also got the Atanas email for around $600 for fleece shirts today. Deleted.
They claim they suspect it's not me who put the order, had to click on a link to cancel (didn't of course), didn't say anything about payment method.
Sweden.
remove
March 16, 2018 at 2:38 AM by an anonymous user from: Stockholm, Sweden
Hi,
I just received it this morning and it seem they have compromised a Webalizer page. The "Cancel it" redirects to hxxps://oneworld.ro/stats/wait.html and I have informed the people at that website.
//Tomas
remove
March 16, 2018 at 1:11 AM by an anonymous user from: Amsterdam, North Holland, Netherlands
Hi,
I got the Atanas for $452 for a fleece email too this morning. Deleted.
Netherlands
remove
March 15, 2018 at 10:18 PM by an anonymous user from: Vancouver, British Columbia, Canada
Got same email from Atanas for $452 usd for Fleece and cotton fleece hoodie.
Good thing I googled this. I will delete as well.
Vancouver, canada
remove
- March 15, 2018 at 11:43 PM by an anonymous user from: Everett, Washington, United States
  I received almost the same email with the same dollar amount and item. It came from service <suppnorep@inbox.eu> and was supposedly for CalvinKlein.com
  Glad that I also googled this!
  Seattle, WA
  remove
March 13, 2018 at 5:59 PM by an anonymous user from: Ostersund, Jamtland County, Sweden
Same here. Deleted it.
remove
March 10, 2018 at 12:55 PM by an anonymous user from: Hereford, England, United Kingdom
This is what I received:
"Dear *** 8 Mar at 9:09 PM
You have sent a payment of 163.00 EUR to calvinklein.com (seller@calvin-klein.com)
Your transaction is being under review, our system has detected that you are using a new unknown device.
We assume that your account wasn't used by you
You can cancel this transaction : Cancel
It may take a few moments for this transaction to appear in your account.
Website
calvinklein.com Note to seller
You haven't included a note.
Shipping address - confirmed
Atanas Atanasov
osmI primorskI polk 78
6700, Varna
Bulgaria Shipping details
The seller hasnt provided any shipping details yet.
Description Unit price Qty Amount
Fleece and cotton fleece hoodie
163.00 EUR
3
163.00 EUR
Insurance - not offered -
Total 163.00 EUR
Payment 163.00 EUR
Payment sent to seller@calvin-klein.com
Thank you for your time"
remove
- March 16, 2018 at 6:14 AM by an anonymous user from: Aveiro, Portugal
  Same with me to today.
  Portugal
  remove
March 8, 2018 at 6:12 AM by an anonymous user from: Frankfurt, Hesse, Germany
Hi, today 08.03.2018 I have got a similar mail:
"You have sent a payment of 325.00 AUD to calvinklein.com (hello@calvinklein.com)
Your transaction is being reviewed because our system has detected that you are using a new unknown device.
We assume that your account wasn't used by you
You can cancel this transaction : Cancel it
Shipping address - confirmed
Atanas Atanasov
osmI primorskI polk 78
6700, Varna
Bulgaria"
Best, Ulrich
remove
February 17, 2018 at 2:10 PM by an anonymous user from: Denver, Colorado, United States
YES - thank you for being here to confirm. I received such an email on 2/9/2018. I didn’t click on any links - googled for Calvin Klein scam and found you. Thank you again!
KP from Colorado
remove
February 9, 2018 at 9:47 AM by an anonymous user from: Freiberg, Saxony, Germany
Same here. Deleted. Thanks for warning
remove
February 8, 2018 at 10:36 PM by an anonymous user from: Dallas, Texas, United States
Yep - I got one of these. clicked on one link that took me to Calvin Klein site that was legit, but did not click on the cancellation link. Was for a "fleece and cotton fleece hoodie 263.00 USD
Said it was going to:
Atanas Atanasov
osmI primorskI polk 78
6700, Varna
Bulgaria
remove
- March 15, 2018 at 11:43 AM by an anonymous user from: Singapore, Central Singapore, Singapore
  Yes, I got exact the same message. Thanks for the alert
  remove
  - March 16, 2018 at 9:42 AM by an anonymous user from: Lillerød, Capital, Denmark
    I just received it to.
    remove