2-Spyware PayPal Phishing Scams Target Users with Fake Invoices and Urgent Requests
Article Content
- •Scammers are using PayPal's invoice system to send fake payment requests.
- •Victims are often misled by alarmist messages urging immediate action.
- •Users should verify any suspicious communications directly through PayPal.
A surge in PayPal phishing scams has been reported, particularly involving fake invoices and urgent requests for personal information. Scammers utilize PayPal's legitimate invoice system to make their communications appear authentic, often including alarmist messages that prompt users to call fake support numbers or provide sensitive information. These scams exploit the trust users have in PayPal, leading to potential financial losses. Victims may receive emails claiming their accounts are suspended or that they need to verify transactions they did not initiate. The Federal Trade Commission advises that legitimate companies, including PayPal, will never ask for sensitive information via email or text. Users are urged to verify any suspicious communications directly through the PayPal app or website. Current reports indicate that these scams are widespread, affecting numerous PayPal users globally.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (6)
Following this threat?
Track PayPal in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
How can I identify a PayPal phishing email?
What should I do if I receive a suspicious invoice?
Are these scams affecting many users?
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…
Korean-speaking Hackers Target PHP Vulnerabilities in Global Campaign A cybersecurity report from Cyfirma reveals that attackers, possibly linked to North Korea's Lazarus group, are preparing to exploit critical vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619). These vulnerabilities allow unauthenticated remote code execution, posing a significant threat to government…