Email · stamped SCAM

The real PayPal email with a fake phone numberSCAM

A real scam people fell for this year, next to the real thing. The numbers mark the three things to check: hover or tap one to see what it tells you.

Safe
MInbox (3) – Gmail×
https://mail.google.com/mail/u/0/#inbox
✎ ComposeInbox 3StarredSnoozedSent
Dave Pelletier requested $24.00 USD
PPayPal <service@paypal.com>to me10:42 AM

Dave Pelletier requested $24.00 USD.

Note from Dave Pelletier: Pizza Friday, your half. Thanks!

Pay nowwww.paypal.com
Scam
MInbox (3) – Gmail×
https://mail.google.com/mail/u/0/#inbox
✎ ComposeInbox 3StarredSnoozedSent
You have a new money request
PPayPal <service@paypal.com>to me10:42 AM

PayPal Billing Department requested $749.99 USD.

Note from PayPal Billing Department: We detected a suspicious charge of $749.99 for Bitcoin on your account. If you did not make this purchase, do not pay. Call PayPal Support at +1 (888) 555-0173 within 24 hours to cancel it.

Pay nowwww.paypal.com

Always check the phone number.

This one really is from PayPal: scammers send a PayPal money request and type a "support" number in the note. The note is the scammer's words, and the number goes straight to them.

Always checkThe real oneThe scam
1Where it livesIs it the real company's or person's own address or number?

service@paypal.com is PayPal's own address.

Also service@paypal.com. The sender is real; the note inside was written by the scammer.

2What it asks you to doCheck firstDoes it want a password, a payment, a call, or a tap?

Pay a friend $24 for pizza, if you want to.

Call +1 (888) 555-0173 about a $749.99 charge.

3How hard it pushesIs there a deadline, a threat, or a surprise charge?

No deadline.

A "suspicious" charge and "call within 24 hours".

RememberA phone number in a PayPal note, invoice or calendar invite is never PayPal's. Sign in to PayPal yourself and look.

Would you have spotted it?

10 pairs like this one, three minutes, a score to share. Then find out who in the family is the easy mark.

Take the testNext scam: The job offer that says "write to me on Outlook" →