PayPal users, be aware of fake PayPal "You've Sent a Payment to Orangemobile Ltd" email messages like the one below, which claim that you have sent money. The fake or phishing email messages are being sent by cybercriminals to trick PayPal users into clicking on a link within them that goes to a fake or phishing PayPal web page. The fake webpage will then attempt to steal PayPal credentials and credit card information. So, it is important that PayPal users remember never to click on a link to sign into their PayPal accounts. They should instead, always go directly to www.paypal.com.
A Sample of the "PayPal You've Sent a Payment to Orangemobile Ltd" Phishing Scam
Von: email@example.com im Auftrag von service <firstname.lastname@example.org>
Gesendet: Sonntag, 13. Mai 2018 20:08
Betreff: you've sent a payment
May 13, 2018
Transaction ID: O-15G0220K7763W
You've sent a payment of 22.00 EUR to Orangemobile Ltd.
Thanks for using PayPal. Please note that this is not a charge. Your account will be charged when the merchant processes your payment. You may receive multiple emails as the merchant processes your order.
Your funds will be transferred when the merchant processes your payment. Any money in your PayPal account at that time will be used before any other payment source.
It may take a few moments for this transaction to appear in your account.
email@example.com Instructions to merchant
You haven't entered any instructions.
You can cancel this transaction :
Cancel Payment Now
Description Unit price Qty Amount
Item Number 22.00 EUR 1 22.00 EUR
Subtotal 22.00 EUR
Total 22.00 EUR
Payment 22.00 EUR
Charge will appear on your credit card statement as "PAYPAL *orangemobile.com"
Payment sent to firstname.lastname@example.org
Invoice ID: 922002148
Note: the cybercriminals may change the payment number, so look out for similar emails with different numbers.
The link in the fake email message goes to a fake PayPal web page on a compromised website that was designed by cyber criminals to trick their potential victims into entering their PayPal username, password and credit card information.
If the requested information is submitted by the potential victims, it will be sent to the cybercriminals, who will use it to steal their money and use their accounts fraudulently.
If you are tricked into submitting your PayPal credentials and credit card information on the fake web page, please change your PayPal password and contact them for help immediately. Also, contact your bank and let them know that you have submitted your credit card information on a phishing website.
Remember, never click on a link to sign into your PayPal account, always go directly to www.paypal.com and login from there. Once you have signed in, check your account for discrepancies and report them to PayPal.