PayPal Phishing Scam

Criminals are sending emails to unsuspecting users that appear to be invoices from PayPal. In fact, the emailed invoices are actually sent through PayPal (see below), so they look completely legitimate. However, these invoices are sent out by bad actors who are not only interested in stealing your money but want to steal all of the information on your computer.

from: service@paypal.com <service@paypal.com>

to: Scott Kowalik <…>

date: Nov 29, 2022, 2:13 PM

subject: Geeksquad billing updated your invoice ( RDFGHB985633 )

mailed-by: paypal.com

signed-by: paypal.com

security: Standard encryption (TLS) Learn more

Contained in the fake invoice email is a phone number to call in order to dispute the charge. Upon calling the number the operator will refer you to tech support to “fix” the issue. Once contacted, the “tech support service” will ask the unsuspecting user to download remote support software so that the tech can have a “look at your computer” and remove any malware installed by the PayPal email. Once given access to the user’s computer the scammer/hacker installs the software that allows him to access the user’s computer 24/7 without the owner’s permission or knowledge.

If you are the victim of such a scam and have paid one of these bogus invoices, contact PayPal customer service, (888) 221-1161. It is also important to have a trusted tech support person run a full malware scan on your computer to ensure that any software the scammers installed is removed.