PayPal users are asked to be on the lookout for fake PayPal email messages like the one below with a fake transaction or order receipt, which claim that they have sent money. The fake or phishing email messages are being sent by cybercriminals to trick PayPal users into clicking on a link within them that goes to a fake or phishing PayPal web page or website. The fake web page or site will then attempt to steal PayPal credentials and credit card information. So, it is important that PayPal users remember never to click on a link to sign into their PayPal accounts. They should instead, always go directly to www.paypal.com, sign into their accounts and check their accounts for transactions.
Sample of a "PayPal You Sent a Payment" Phishing Scam
From: Service@ρay-transactions.com -ρayρaI® <chardemonhotmailcom@paybillsapp-securesummarry.com>
Sent: Monday, September 25, 2017 8:21:19 AM
Subject: Transaction Receipt Confirmation Order Receipt Info - REF #XBD8398HDXX
ρayρaI
You sent a payment $59.00 USD to Matistorez, ltd
Transaction ID : XBD8398HDXX
Sep 25 , 2017 9:19:06 PM UTC
Mobile Wirelles Charging - BlueCoral
#287298372 $59.00 USD
Tax $0.00 USD
$59.00 USD
Shipping Address
Kirana Sapi Asu
27 Matthew Street Merrylands
Sydney, NSW 2160
AUS
If this not your transaction, we will help the process of recovery refund and protect your account. press the button bellow
RECOVER MY ACCOUNT
PayPaI ID Summary • Purchase History • Terms of Sale • Privacy Policy
Copyright © 2017 PayPaI Pty Ltd.
All rights reserved
The link in the fake email message goes to a fake PayPal web page (hxxp://paybillsapp-securesummarry.com) created by cybercriminals to trick their potential victims into entering their PayPal username, password and credit card information.
If the requested information is submitted by the potential victims, it will be sent to the cybercriminals, who will use it to steal their money and use their accounts fraudulently.
If you are tricked into submitting your PayPal credentials and credit card information on the fake web page, please change your PayPal password and contact them for help immediately. Also, contact your bank and let them know that you have submitted your credit card information on a phishing website.
Remember, never click on a link to sign into your PayPal account, always go directly to www.paypal.com or use PayPal's legitimate mobile app. Once you have signed into your account, you will be able to view the transactions on your account, if there are any.