Tuesday, 06 December 2022 14:56

Scam: "We have detected some suspicious unlawful activities with your Paypal account."

Written by

I received this message through my PayPal account and almost fell for it, figured I'd share and warn others. 

Below is the full message they sent - their strategy is to use the "money request" feature in PayPal to trick you into calling a fraudulant 888 toll free number so they can try to gain access to your PayPal account. 

 

This comes through as a REAL "money request" in your PayPal account.  But the transaction and overall premise is a lie.

 

 

Example A:

Hello, Nate Covington
Helen Harper sent you a money request

NOTE FROM Helen Harper:

We have detected some suspicious unlawful activities with your Paypal account. If you did not make this transaction through target store, please call us at toll free number +1 (888) 962-7298. to cancel and claim a refund. If this is not the case, you will be charged $699. 99 today. Within the automated deduction of the amount, this transaction will reflect on PayPal activity after 24 hours. Our Service Hours: (06:00 a. m. to 06:00 p. m. Pacific Time, Monday through Friday)


Payment request details
Transaction ID
U-61U31513UN2097411
Transaction date
December 5, 2022

Amount requested $699.99 USD

 

Example B:

------- Forwarded Message --------

Subject: Invoice from FRAUDULENT ACTIVITY (0006)
Date: Tue, 06 Dec 2022 07:57:19 -0800
From: FRAUDULENT ACTIVITY <This email address is being protected from spambots. You need JavaScript enabled to view it.;
Reply-To: FRAUDULENT ACTIVITY <This email address is being protected from spambots. You need JavaScript enabled to view it.;
To: Nate Covington <This email address is being protected from spambots. You need JavaScript enabled to view it.;

Hello, This email address is being protected from spambots. You need JavaScript enabled to view it. Here's your invoice

FRAUDULENT ACTIVITY sent you an invoice for $699.99 USD

Due on receipt

View and Pay Invoice [https://www.paypal.com/invoice/payerView/details/INV2-LXJ8-M6EL-2C3D-GWG8?v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000238&utm_unptid=a7cbc2d2-757e-11ed-913a-3cfdfee8d5e5&ppid=RT000238&cnac=US&rsta=en_US%28en-US%29&cust=XNAD8S39AUPGL&unptid=a7cbc2d2-757e-11ed-913a-3cfdfee8d5e5&calc=f720847e350e4&unp_tpcid=invoice-buyer-notification&page=main%3Aemail%3ART000238&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.128.0&xt=104038%2C124817] Buy now. Pay over time.

Simply select PayPal Credit at checkout and enjoy No Interest if paid in full in 6 months. Subject to credit approval. See terms [https://www.billmelater.com/cm/paypal/landers/18ppcTERMS.html?v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000238&utm_unptid=a7cbc2d2-757e-11ed-913a-3cfdfee8d5e5&ppid=RT000238&cnac=US&rsta=en_US%28en-US%29&cust=XNAD8S39AUPGL&unptid=a7cbc2d2-757e-11ed-913a-3cfdfee8d5e5&calc=f720847e350e4&unp_tpcid=invoice-buyer-notification&page=main%3Aemail%3ART000238&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.128.0&xt=104038%2C124817]. US customers only.

Seller note to customer

We have detected some suspicious unlawful activities with your Paypal account. If you did not make this transaction through target store, please call us at toll free number +1 (888) 987-1659. to cancel and claim a refund. If this is not the case, you will be charged $699. 99 today. Within the automated deduction of the amount, this transaction will reflect on PayPal activity after 24 hours. Our Service Hours: (06:00 a. m. to 06:00 p. m. Pacific Time, Monday through Friday)

Don't know this seller?

You can safely ignore this invoice if you're not buying anything from this seller. PayPal won't ask you to call or send texts to phone numbers in an invoice. We don't ask for your credentials or auto-debit money from your account against any invoices. Contact us [https://www.paypal.com/smarthelp/contact-us?v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000238&utm_unptid=a7cbc2d2-757e-11ed-913a-3cfdfee8d5e5&ppid=RT000238&cnac=US&rsta=en_US%28en-US%29&cust=XNAD8S39AUPGL&unptid=a7cbc2d2-757e-11ed-913a-3cfdfee8d5e5&calc=f720847e350e4&unp_tpcid=invoice-buyer-notification&page=main%3Aemail%3ART000238&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.128.0&xt=104038%2C124817] if you're still not sure.

Not sure why you received this email? Learn more [https://www.paypal.com/us/smarthelp/article/why-am-i-receiving-emails-from-paypal-when-i-dont-have-an-account-faq4172?v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000238&utm_unptid=a7cbc2d2-757e-11ed-913a-3cfdfee8d5e5&ppid=RT000238&cnac=US&rsta=en_US%28en-US%29&cust=XNAD8S39AUPGL&unptid=a7cbc2d2-757e-11ed-913a-3cfdfee8d5e5&calc=f720847e350e4&unp_tpcid=invoice-buyer-notification&page=main%3Aemail%3ART000238&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.128.0&xt=104038%2C124817]

Copyright © 1999-2022 PayPal, Inc. All rights reserved. PayPal is located at 2211 N. First St., San Jose, CA 95131.

PayPal RT000238:en_US(en-US):1.4.0:f720847e350e4

Last modified on Friday, 30 December 2022 13:20

Latest Comments

Just received one today (16 Aug 2022) from "Mailchimp". Thanks for sharing!
Thanks for posting this. I just got one today. I was 99% sure it was a scam, and your post confirmed...
Thank you. I just got one of these emails and was suspicious so I did a search.
Another one for 2022 Hello, Your website or a website that your company hosts is violating the copy...
Nate Covington posted a comment in Download XMap for Joomla - All Versions Joomla
Hi, I stopped using Xmap years ago. Not sure about your particular error with Hikashop. I suggest ...


Design & Development

Wordpress, Drupal, Joomla
New custom websites
Bespoke themes and extensions
Redesigns, upgrades, migrations

Web Design & Development


Optimization & SEO

Let us optimize and manage your overall online presence. We offer full service monthly SEO as well as one-time projects.  

Optimization Plans & Pricing


Maintenance, Patching

White glove monthly backups, security updates, maintenance and testing for your Wordpress, Drupal, or Joomla site.

Maintenance Plans & Pricing


Email Newsletter

Bring your web & marketing performance to the next level: monthly blog post roundup via email.  

Stay in Touch!