Online Threat Alerts (OTA) - Alerting you to scams and frauds.

PHP Currency PayPal Scam - Protect Yourself

Active PayPal scams involving Philippine Peso (PHP) often use phishing emails to report fake unauthorized transactions, urging users to call fraudulent "support" numbers or click links to steal credentials. Scammers also use "penny scam," this includes sending small amounts to trick users into calling, resulting in potential phishing or, as reported by this Facebook post, draining accounts and transferring funds to GCash.

About the PHP/PayPal Scam

  • The "Small Deposit" Trick: Scammers send a tiny amount (like 1 PHP, 1 cent, or 2 cents) to verify your account is active and to get your attention.
  • Fake Security Alerts: You receive a phishing email or a fake invoice in your PayPal app claiming a large unauthorized transaction (e.g., 20,000 PHP) has been made.
  • Phony Support Number: The fraudulent alert provides a phone number. Calling this number connects you to a scammer, not PayPal, who will attempt to steal login credentials or personal information.
  • Malicious Links: Clicking links in these emails may lead to fake websites designed to harvest your username, password, or credit card details.
  • Unusual Currency Demands: Scammers may ask for funds to be transferred specifically via GCash in the Philippines.

Protect Yourself

  • Do Not Call: Never call the phone number provided in a suspicious email or text.
  • Check Independently: Log in directly to the official PayPal website or app to verify transactions rather than clicking email links.
  • Report Suspicious Activity: Use the official "Report a problem" feature within the PayPal website to report unauthorized transactions.
  • Enable 2FA: Set up two-factor authentication on your PayPal account for extra security.

If you have been targeted, look out for unexpected money requests, such as the 20,000 PHP scam. If a small amount was sent to you, report it and do not send it back to the sender.

waiting