A "PayPal You Sent Payment to TOMTOP, Ltd" Phishing Scam
Re: A payment receipt to TOMTOP, Ltd. (firstname.lastname@example.org) - on Wednesday, November 21, 2018.
PayPaI Receipt email@example.com
Wednesday, November 21, 2018,
Transaction ID: 1KBTKY789OL4MIPWCS
You sent a payment of $44.24 USD to TOMTOP, Ltd.
it may take some time until this transaction to appear in your PayPaI account,
firstname.lastname@example.org Instructions for merchants
You haven't entered any instructions.
Shipping address - confirmed
Hazel L Mangino
1339 Selah Way
Burlington, VT 05401
United States. Shipping details
SeIIer haven't icluded a shipping
Description Unit Price Quality Amount
MAGIC-REFINER MK9 Mechanical Gaming Keyboard
$44.24 USD 1 $44.24 USD
Payment $44.24 USD
Payment sent to email@example.com
Invoice : lNV/BSM3/DJ22/DQI1You don't recognize this transaction?
Click to Dispute this transaction
You have 24 Hour from the date of the transaction to open a "DISPUTE" in the Resolution Center.
Please do not reply to this email. This mailbox is not monitored and you will not receive a response. For assistance, and click help in the top right corner of any page.
Consumer Advisory - Ltd., the holder of stored value facility
does not require the approval of the Monetary Authority of Singapore.
Users are advised to read the terms and conditions carefully.
The link in the fake email message goes to a fake PayPal website at hxxps://webapps-dispute.redirectme.net/signin/ that was designed by cyber criminals to trick their potential victims into entering their PayPal username, password and credit card information.
If the requested information is submitted by the potential victims, it will be sent to the cybercriminals, who will use it to steal their money and use their accounts fraudulently.
If you are tricked into submitting your PayPal credentials and credit card information on the fake web page, please change your PayPal password and contact them for help immediately. Also, contact your bank and let them know that you have submitted your credit card information on a phishing website.
Remember, never click on a link to sign into your PayPal account, always go directly to www.paypal.com and login from there.