PayPal Subscription Scam Uses Legitimate Emails for Phishing

PayPal Subscription Scam Uses Legitimate Emails for Phishing

First seen 15 Dec 2025, 10:46 UTC BleepingcomputerTechnaduScworld 24.3

Article Content

Browse articles
ThreatCluster

A new phishing scam is exploiting PayPal's subscription billing feature to send fake purchase notifications via emails that appear to be from PayPal's own servers. Users have reported receiving messages claiming their automatic payments are inactive, with links to fraudulent customer service URLs. This method allows the emails to bypass traditional security filters by appearing legitimate.