"PayPal Unusual Payment Cancellation" Phishing Scams

PayPal Unusual Payment Cancellation Phishing Scams

PayPal users who have received email messages like the one below asking recipients to click a link to cancel an unusual payment on their accounts, are asked to delete them. This is because the email messages are phishing scams, being sent by cyber-criminals to trick PayPal users into visiting phishing websites steal PayPal usernames and passwords.

A Sample of the Phishing PayPal Email Message

From: PayPal Account <peyyyy12482106@nustay.business>

Sent: Saturday, January 6, 2018 4:21:23 PM

Subject: [Summary Report] Reminder : Unsual Payment From Santa Fe, Texas 06 January 2018, 11:25 (GMT - 7)

Thank you for purchase

You can cancel your order within 1 x 24 hours please follow the instructions in the (PDF/attachment) that we sent is thank you.

Thank's

PayPal Support

02 Jan 2018 00:11:12 GMT

Transaction ID: 7486465006

You authorised a payment of �9.99 GBP to Spotify Limited

Your funds will be transferred when the merchant processes your payment. Any money in your PayPal account at that time will be

used before any other payment source.

Thanks for using PayPal. To see the full transaction details, log in to your PayPal account.

This is not you?

Cancel Now

Payment sent to support@spotify.com

Merchant

Spotify Limited

support@spotify.com

Instructions to merchant

You haven't entered any instructions.

02 Jan 2018 00:11:12 GMT

Transaction ID: 7486465006

You authorised

The link in the phishing email message goes to a fake PayPal website (hxxp://pay-pai-receipt-id-10051895.com.web-page128491025812.com), which has been created by cyber-criminals to trick their potential victims into entering their PayPal username, password and credit card information on it. If the requested information is submitted by the potential victims, it will be sent to the cyber-criminals, who will use it to steal their money and use their accounts fraudulently. The cyber-criminals / scammers behind the phishing email message will change the website's name, so look out for similar phishing email messages with links that go to different phishing websites.

If you are tricked into submitting your PayPal credentials and credit card information on the fake web page, please change your PayPal password immediately and contact your bank and let them know that you have submitted your credit card information on a phishing website.

Remember, never click on a link to sign into your PayPal account, always go directly to: www.paypal.com and login from there and check your account for any discrepancies.

Check the comment section below for additional information, share what you know, or ask a question about this article by leaving a comment below. And, to quickly find answers to your questions, use our search Search engine.

Note: Some of the information in samples on this website may have been impersonated or spoofed.
Was this article helpful?  +
  • YesLike (0)
  •       
  • NoDislike (0)   
Share this with others:
Facebook
WhatsApp
Twitter
Reddit
Pinterest
Line Me
Save
Donate

Comments, Questions, Answers, or Reviews

Comments (Total: 2)

To protect your privacy, please remove sensitive or identifiable information from your comments, questions, or reviews. We will use your IP address to display your approximate location to other users when you make a post. That location is not enough to find you.

Your post will be set as anonymous because you are not signed in. An anonymous post cannot be edited or deleted, therefore, review it carefully before posting. Sign-in.

The comments, reviews or answers below do not necessarily reflect the views of Online Threat Alerts (OTA).

  • January 9, 2018 at 8:12 AM by info

    Here is another scam:

    "Van: Noreply PɑyPɑl® [mailto:lhh700hotmailcojp@bussineess-appscenters.com]

    Verzonden: Monday, January 8, 2018 6:52 PM

    Onderwerp: [Order ID #PYPL93HD93J1] - Laatste aankoop op January 8, 2018

    Hey, beloved user,

    Bedankt voor het bestellen bij ons!

    We hebben een nieuwe bevestiging bij ons nodig,

    Zolang uw bestelling gereed is, open deze dan en laat ons weten dat u wijzigingen (weergave) in het bestand nodig heeft of sla het op (download het) naar uw apparaat.

    Thanks,

    You sent a payment $59.00 USD to ApsclubStore

    Transaction ID : PYPL93HD93J1

    38mm Midnight Blue Sport Band - S/M &

    M/L

    #287298372

    $59.00 USD

    Tax $0.00 USD

    $59.00 USD

    Shipping Address

    Rudolf Paimos

    27 Matthew Street Merrylands

    Sydney, NSW 2160

    AUS

    If this not your transaction, we will help the process of recovery

    refund and protect your account. press the button bellow

    PayPaI ID Summary • Purchase History • Terms of Sale • Privacy Policy

    Copyright © 2017PayPaI Pty Ltd."

  • January 9, 2018 at 8:09 AM by info

    Here is another scam:

    "From: PayPaI Account <invoice-appconfirmationjoss922134@nustay.business>

    Sent: Monday, January 8, 2018 12:48 PM

    Subject: [ Order Confirmation ] Spotify Limited Order Payment Information.

    Thank your for your payment on purchasing Spotify Limited.

    Your payment we have received and immedately we process

    - Open Invoice in the Attachment (PDF)

    - Read your invoice

    - Confirm/Cancel Your Order

    Thank's

    PayPaI

    You authorised a payment of �9.99 GBP to Spotify Limited

    Your funds will be transferred when the merchant processes your payment. Any money in your PayPal account at that time will be

    used before any other payment source.

    Thanks for using PayPal. To see the full transaction details, log in to your PayPal account.

    This is not you?

    Cancel Now"

Comments Show More Comments (1)

Write Your Comment, Question, Answer, or Review

"PayPal Unusual Payment Cancellation" Phishing Scams