Warning! JavaScript is turned off or disabled! Some features on this website will not work.
« »
»

Beware of "PayPal Unusual Payment Cancellation" Phishing Scams

2018-01-07T02:44:09 -  +
Beware of "PayPal Unusual Payment Cancellation" Phishing Scams

PayPal users who have received email messages like the one below asking recipients to click a link to cancel an unusual payment on their accounts, are asked to delete them. This is because the email messages are phishing scams, being sent by cyber-criminals to trick PayPal users into visiting phishing websites steal PayPal usernames and passwords.

Please continue reading below.

A Sample of the Phishing PayPal Email Message

From: PayPal Account <peyyyy12482106@nustay.business>

Sent: Saturday, January 6, 2018 4:21:23 PM

Subject: [Summary Report] Reminder : Unsual Payment From Santa Fe, Texas 06 January 2018, 11:25 (GMT - 7)

Thank you for purchase

You can cancel your order within 1 x 24 hours please follow the instructions in the (PDF/attachment) that we sent is thank you.

Thank's

PayPal Support

02 Jan 2018 00:11:12 GMT

Transaction ID: 7486465006

You authorised a payment of �9.99 GBP to Spotify Limited

Your funds will be transferred when the merchant processes your payment. Any money in your PayPal account at that time will be

used before any other payment source.

Thanks for using PayPal. To see the full transaction details, log in to your PayPal account.

This is not you?

Cancel Now

Payment sent to support@spotify.com

Merchant

Spotify Limited

support@spotify.com

Instructions to merchant

You haven't entered any instructions.

02 Jan 2018 00:11:12 GMT

Transaction ID: 7486465006

You authorised

The link in the phishing email message goes to a fake PayPal website (hxxp://pay-pai-receipt-id-10051895.com.web-page128491025812.com), which has been created by cyber-criminals to trick their potential victims into entering their PayPal username, password and credit card information on it. If the requested information is submitted by the potential victims, it will be sent to the cyber-criminals, who will use it to steal their money and use their accounts fraudulently. The cyber-criminals / scammers behind the phishing email message will change the website's name, so look out for similar phishing email messages with links that go to different phishing websites.

If you are tricked into submitting your PayPal credentials and credit card information on the fake web page, please change your PayPal password immediately and contact your bank and let them know that you have submitted your credit card information on a phishing website.

Remember, never click on a link to sign into your PayPal account, always go directly to: www.paypal.com and login from there and check your account for any discrepancies.

Please share what you know or ask a question about this article by leaving a comment below. Also, check the comment section below for additional information, if there is any.

Remember to forward suspicious, malicious, or phishing email messages to us at the following email address: info@onlinethreatalerts.com

Also, report scams, untrustworthy, or fraudulent websites to us. Tell us why you consider the websites untrustworthy or fraudulent.

If you want to quickly find answers to your questions, use our search engine.

Remember to help us, help you, by donating. 🎁Click here to donate

Please continue reading below.

Comments, Questions and Reviews ✍
(Total: 2)

To help protect your privacy, please do not post or remove, your full name, telephone number, email address, username, password, account number, credit card information, home address or other sensitive information in or from your comments, questions, or reviews.

Show More of the 2 Comments

Write Your Comment, Question or Review

Write your comment, question or review in the box below to share what you know or to get answers. Please revisit after an hour or more to view reponses or answers to you questions.

Your comment, question or review will be posted as an anonymous user because you are not signed in. Sign-in.


The comments or reviews below do not necessarily reflect the views of Online Threat Alerts.

  • Posted: Jan 9, 2018 at 8:12 AM by info

    Here is another scam:

    "Van: Noreply PɑyPɑl® [mailto:lhh700hotmailcojp@bussineess-appscenters.com]
    Verzonden: Monday, January 8, 2018 6:52 PM
    Onderwerp: [Order ID #PYPL93HD93J1] - Laatste aankoop op January 8, 2018

    Hey, beloved user,

    Bedankt voor het bestellen bij ons!

    We hebben een nieuwe bevestiging bij ons nodig,

    Zolang uw bestelling gereed is, open deze dan en laat ons weten dat u wijzigingen (weergave) in het bestand nodig heeft of sla het op (download het) naar uw apparaat.

    Thanks,

    You sent a payment $59.00 USD to ApsclubStore
    Transaction ID : PYPL93HD93J1
    38mm Midnight Blue Sport Band - S/M &

    M/L
    #287298372
    $59.00 USD
    Tax $0.00 USD
    $59.00 USD
    Shipping Address
    Rudolf Paimos
    27 Matthew Street Merrylands
    Sydney, NSW 2160
    AUS

    If this not your transaction, we will help the process of recovery
    refund and protect your account. press the button bellow
    PayPaI ID Summary • Purchase History • Terms of Sale • Privacy Policy
    Copyright © 2017PayPaI Pty Ltd."

    delete


  • Posted: Jan 9, 2018 at 8:09 AM by info

    Here is another scam:

    "From: PayPaI Account
    Sent: Monday, January 8, 2018 12:48 PM
    Subject: [ Order Confirmation ] Spotify Limited Order Payment Information.

    Thank your for your payment on purchasing Spotify Limited.
    Your payment we have received and immedately we process

    - Open Invoice in the Attachment (PDF)
    - Read your invoice
    - Confirm/Cancel Your Order
    Thank's

    PayPaI

    You authorised a payment of �9.99 GBP to Spotify Limited
    Your funds will be transferred when the merchant processes your payment. Any money in your PayPal account at that time will be
    used before any other payment source.
    Thanks for using PayPal. To see the full transaction details, log in to your PayPal account.
    This is not you?
    Cancel Now"

    delete