Skip to content
PayPal Subscription Scam Uses Legitimate Emails for Phishing

PayPal Subscription Scam Uses Legitimate Emails for Phishing

First seen 15 Dec 2025, 10:46 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

A new phishing scam is exploiting PayPal's subscription billing feature to send fake purchase notifications via emails that appear to be from PayPal's own servers. Users have reported receiving messages claiming their automatic payments are inactive, with links to fraudulent customer service URLs. This method allows the emails to bypass traditional security filters by appearing legitimate.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 212d ago How this analysis works

More articles in this cluster (3)

Following this threat?

Track Scattered Lapsus$ Hunters and PayPal in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed