PayPal Phishing Email Scam Report

code2exit

January 27, 2025

Channel Information

Description

Recently, I came across a phishing email scam impersonating PayPal. Below are the main details and characteristics of the email: 1. Sender Information Sender Name: Horrigan OT Instituto Sender Email Address: (Include the suspicious sender email address if available) 2. Email Subject Subscription Invoices_HN37190 3. Key Content The email pretends to be an invoice from PayPal, claiming that the recipient has already paid $380.82. It includes the statement: "Charge is already deducted. Please do not pay again." to reassure the recipient. The invoice lists a purchase for cryptocurrency (0.07973772 Coins) and related Chainblock receiving charges. 4. Suspicious Elements Fake Sender Information: The sender’s email address does not belong to PayPal’s official domain. Unrecognized Transaction: The recipient has no knowledge of this purchase, and it does not appear in their official PayPal account. Fraudulent Support Number: The number (877) 567-4770 provided does not match PayPal’s official customer support. Urgency Tactics: The email urges the recipient to check the attached file immediately, creating unnecessary urgency. 5. Potential Threats The attached file could contain malware or direct users to a phishing website. If recipients contact the provided number or open the file, they risk further financial information theft or monetary loss. 6. Recommended Actions Do not open the email or download any attached files. Verify the transaction by contacting PayPal’s official customer support directly. Report the email, including the full email header information, to PayPal and security organizations.

Attachments