Online Threat Alerts (OTA) - Alerting you to scams and frauds.

SJ3 Norman Enterprises PayPal Ft 1 HUF Coinbase Scam Email
SJ3 Norman Enterprises PayPal Ft 1 HUF Coinbase Scam Email

The "SJ3 Norman Enterprises Ft 1 HUF" reference appears to be part of a sophisticated, widespread PayPal Coinbase invoice scam, which appears to be sent or spoofed from email address "sheila.norman@outlook.com", asking recipients to call the fake customer service numbers: 888-341-5322, 682-564-8025. The scam is designed to steal personal information or money by abusing PayPal’s legitimate invoicing system. These scams often use real company names—or fraudulent ones like "SJ3 Norman Enterprises"—to send official-looking invoices or payment requests directly through PayPal.

The Scam(Sample)

SJ3 Norman Enterprises Ft 1 HUF PayPal Scam

SJ3 Norman Enterprises +Ft 1 HUF

Apr 27, 2026, 9:52 AM

Pre-fund confirmation: USD 987.90 is pending charge

to Coinbase via PayPal. This small deposit is just used for the account activation check. For questions, Call- (888) 341-5322.

Details

Amount

Total

Key Aspects

  • Realistic Invoices: Scammers send invoices via service@paypal.com, making them hard to identify as fake.
  • "Refund" Hook: The email usually claims an unauthorized charge (e.g., "$3544" or similar high amount) was made for a service like "Bitcoin," "Geek Squad," or "Walmart".
  • The Goal is a Call: The invoice includes a fake phone number to call for a cancellation or refund. If you call, fraudsters try to steal financial information, remote access to your computer, or two-factor authentication codes.
  • Impersonation: The name "SJ3 Norman Enterprises" or similar variations (e.g., Sandra Bermon) may be used to create a false sense of a real business.

Protect Yourself

  • Do Not Call: Never call the phone number listed in a suspicious PayPal invoice or email.
  • Check Directly: Log in to your PayPal account via the official app or website to verify transactions. If it's not there, it is a scam.
  • Report: Forward suspicious emails to phishing@paypal.com and delete them.
  • Ignore Generic Greetings: Be wary of emails that use greetings like "Dear Customer" instead of your name.

If you have already engaged with them, report the incident to PayPal immediately and secure your account by changing passwords and monitoring for fraudulent activity.

waiting