The fake PayPal "Update Your Expired Credit-Debit Card Information" email message below is a phishing scam sent by cybercriminals to steal the recipients’ PayPal usernames and passwords. Therefore, recipients of the fake PayPal email message should delete it and never follow the instructions in it. Recipients who have already followed the instructions in the phishing email message should change their PayPal passwords immediately before their accounts are hijacked, money stolen, and their accounts used fraudulently. Also, they should check their PayPal accounts for any discrepancy.
The "PayPal Update Your Expired Credit-Debit Card Information" Scam
From: service@paypal.com [support@express.net]
Sent: 30 May 2018 01:01
Subject: Update your expired credit-debit card information.
Dear Client,
We noticed that your credit card information is missing. Please update card number with expiry date and card security code (CSC) as soon as possible so that you can continue using it with your PayPal account. Be sure to activate your new card with your first bank.
Update card details hxxps://websitinfo.net/p1.html
If you haven't received your new card yet, please save this email and click the button when you have the new card. If you've already updated your PayPal account with your new card information, please disregard this email.
You can always log in directly to PayPal to update your debit or credit card information in the Profile or Settings areas.
Yours sincerely,
PayPal
This why PayPal users should never click on a link to sign into their accounts. They should always go directly to www.paypal.com and sign-in from there instead. Once they have signed in, they will be notified of important changes or updates.