Warning! JavaScript is turned off or disabled! Some features on this website will not work.
Alerts left arrow right arrow   

Beware of "PayPal Unusual Payment Cancellation" Phishing Scams

Comments  +
Beware of "PayPal Unusual Payment Cancellation" Phishing Scams

PayPal users who have received email messages like the one below asking recipients to click a link to cancel an unusual payment on their accounts, are asked to delete them. This is because the email messages are phishing scams, being sent by cyber-criminals to trick PayPal users into visiting phishing websites steal PayPal usernames and passwords.

Please continue below.

A Sample of the Phishing PayPal Email Message

From: PayPal Account <peyyyy12482106@nustay.business>

Sent: Saturday, January 6, 2018 4:21:23 PM

Subject: [Summary Report] Reminder : Unsual Payment From Santa Fe, Texas 06 January 2018, 11:25 (GMT - 7)

Thank you for purchase

You can cancel your order within 1 x 24 hours please follow the instructions in the (PDF/attachment) that we sent is thank you.

Thank's

PayPal Support

02 Jan 2018 00:11:12 GMT

Transaction ID: 7486465006

You authorised a payment of �9.99 GBP to Spotify Limited

Your funds will be transferred when the merchant processes your payment. Any money in your PayPal account at that time will be

used before any other payment source.

Thanks for using PayPal. To see the full transaction details, log in to your PayPal account.

This is not you?

Cancel Now

Payment sent to support@spotify.com

Merchant

Spotify Limited

support@spotify.com

Instructions to merchant

You haven't entered any instructions.

02 Jan 2018 00:11:12 GMT

Transaction ID: 7486465006

You authorised

The link in the phishing email message goes to a fake PayPal website (hxxp://pay-pai-receipt-id-10051895.com.web-page128491025812.com), which has been created by cyber-criminals to trick their potential victims into entering their PayPal username, password and credit card information on it. If the requested information is submitted by the potential victims, it will be sent to the cyber-criminals, who will use it to steal their money and use their accounts fraudulently. The cyber-criminals / scammers behind the phishing email message will change the website's name, so look out for similar phishing email messages with links that go to different phishing websites.

If you are tricked into submitting your PayPal credentials and credit card information on the fake web page, please change your PayPal password immediately and contact your bank and let them know that you have submitted your credit card information on a phishing website.

Remember, never click on a link to sign into your PayPal account, always go directly to: www.paypal.com and login from there and check your account for any discrepancies.

Please share with us what you know or ask a question about this article by leaving a comment below. Also, check the comment section below for additional information, if there is any.

Remember to forward malicious or phishing email messages to us at the following email address: info@onlinethreatalerts.com

Share this on:

and/or ContributionDonate

Would you recommend this article to a friend or family member?
Yes (0) No (0)   

Comments, Questions and Reviews
Comment(Total: 2)

To help protect your privacy, please do not post your full name, telephone number, email address, username, password, account number, credit card information or home address in your comments, questions, or reviews.

Write a Comment, Review, or ask a Question or scroll down to view comments, reviews and questions made by others.

The comments or reviews below do not necessarily reflect the views of Online Threat Alerts.

  • Posted: Jan 9, 2018 by info

    Here is another scam:

    "Van: Noreply PɑyPɑl® [mailto:lhh700hotmailcojp@bussineess-appscenters.com]
    Verzonden: Monday, January 8, 2018 6:52 PM
    Onderwerp: [Order ID #PYPL93HD93J1] - Laatste aankoop op January 8, 2018

    Hey, beloved user,

    Bedankt voor het bestellen bij ons!

    We hebben een nieuwe bevestiging bij ons nodig,

    Zolang uw bestelling gereed is, open deze dan en laat ons weten dat u wijzigingen (weergave) in het bestand nodig heeft of sla het op (download het) naar uw apparaat.

    Thanks,

    You sent a payment $59.00 USD to ApsclubStore
    Transaction ID : PYPL93HD93J1
    38mm Midnight Blue Sport Band - S/M &

    M/L
    #287298372
    $59.00 USD
    Tax $0.00 USD
    $59.00 USD
    Shipping Address
    Rudolf Paimos
    27 Matthew Street Merrylands
    Sydney, NSW 2160
    AUS

    If this not your transaction, we will help the process of recovery
    refund and protect your account. press the button bellow
    PayPaI ID Summary • Purchase History • Terms of Sale • Privacy Policy
    Copyright © 2017PayPaI Pty Ltd."

    delete


  • Posted: Jan 9, 2018 by info

    Here is another scam:

    "From: PayPaI Account <invoice-appconfirmationjoss922134@nustay.business>
    Sent: Monday, January 8, 2018 12:48 PM
    Subject: [ Order Confirmation ] Spotify Limited Order Payment Information.

    Thank your for your payment on purchasing Spotify Limited.
    Your payment we have received and immedately we process

    - Open Invoice in the Attachment (PDF)
    - Read your invoice
    - Confirm/Cancel Your Order
    Thank's

    PayPaI

    You authorised a payment of �9.99 GBP to Spotify Limited
    Your funds will be transferred when the merchant processes your payment. Any money in your PayPal account at that time will be
    used before any other payment source.
    Thanks for using PayPal. To see the full transaction details, log in to your PayPal account.
    This is not you?
    Cancel Now"

    delete


Submit Comment Write Your Comment, Question or Review

Write your comment, question or review in the box below to share what you know or to get answers. Please revisit after an hour or more to view reponses or answers to you questions.
All comments, questions or reviews will be examined for derogatory or indecent statements, spam or malicous code, before they are posted on this website.