Reports reaching us of a new phishing scam targeting PayPal users. Fraudsters impersonating Grand Canyon Historical Society send legit-looking PayPal invoices for $1038.35 USD. The email contains a note requesting recipients to call 888-338-5279 if they didn’t recognise the transaction.
If you receive the email or something similar, it’s obviously a phishing scam attempt as the email has the following red flags;
- The number you’re requested to call immediately for assistance isn’t the legit Paypal customer service number.
- The notification does not appear when recipients check their PayPal account on Paypal.com
- It contains grammatical errors, and it is sent as a forwarded broadcast email.
Grand Canyon Historical Society PayPal Invoice Scam
The PayPal Invoice scam is a phishing scam from fraudsters impersonating Grand Canyon Historical Society to defraud people via PayPal.com invoice system. They pose as sellers on PayPal and send random payment requests for fake transactions to various email addresses.
Just before they request for the fake payment on PayPal.com, they would include a note that is engineered to make it look like your PayPal account is actually being charged. It’s just bait to get people to panic and call a fake PayPal customer care number in the note to stop the charges. The email which looks legit and is sent from [email protected] is actually a scam, as it contains a fake PayPal customer service number.
How Does This Fake Paypal Invoice Email Work?
The scam works these ways;
- The invoice contains a fake Paypal customer service number which victims are directed to call. Upon calling the number, a scammer would fool them into paying the invoice or giving up personally identifiable information (PII), including financial data, such as PayPal account, credit card, or bank information.
- In some cases, the criminals ask victims to install software they claim will help with the recovery process. The malicious download may contain spyware — dangerous malware designed to steal information like; Credit card numbers, Bank account details, Passwords, Usernames, Social security numbers, and Other sensitive data. This software could also record the victim’s keystrokes or give the criminals remote access to the victim’s computer.
- The fake Paypal Invoice may contain a spoofed URL which looks like paypal.com but is actually paypaI.com (capital ‘I’ in the end of PayPal instead of small letter L). Clicking on it takes the victims to a malicious website which would request for their Paypal account details. Then the scammers would use the account details provided to carry fraud attempt on the account.
Also, some types of malware may also give the attackers remote access to your device. Once your computer is infected, the cryptojacker starts working around the clock to mine cryptocurrency while staying hidden in the background.
Red Flags To Watch Out If you get an Unrecognized PayPal Invoice
If you get a PayPal invoice for a transaction that you didn’t recognize, here’s warning signs to look out for;
- Uses generic greetings, such as “Dear user” or “Dear [your email address].” PayPal emails only address you by your first and last names or by your business name.
- Has a false sense of urgency. If there’s an urgent need for you to do something immediately, it’s likely a scam. To rule it out, you should confirm the email by logging into PayPal directly.
- Contains unknown attachments. Only open an attachment if you’re sure it’s legitimate and secure. Some attachments contain viruses that install themselves when opened.
- Asks you to click on links that take you to a fake website. The links are not from secure paypal URL like www.paypal.com/SpecialOffers. To be on the safe side, make sure to move your mouse over the link to see the true destination. If you aren’t certain, don’t click on the link.
What to do If You Got The Scam PayPal Invoice Email
Report
Send an email to [email protected] with a screenshot of the scam email as an attachment. This can help them warn other customers and stop future scams.
Delete
Deleting the scam email will prevent you from mistakenly responding
Block
The final step you should take is blocking the email address that sent the scam email. You can do this by adding the email address in your phone’s spam list.
See similar trending PayPal Scam – Vested LLC PayPal Invoice Scam
Did you receive this scam Paypal Money Request? What number were you told to call? Please let us know in the comment section!
Nora