No items found.
No items found.
Back to All Attacks
Attack Details
Attack Date:
Apr 9, 2022

PayPal Suspicious Account Activity Fake Billing Scam

Initial Email Content

Subject
Attn : Your PayPal account access is temporarily limited
Body

Dear User,

Attn: We noticed unusual activity in your PayPal account

Thanks for your patience while we review the unauthorised activity case on a payment you have sent. We're happy to confirm that this transaction is eligible for PayPal Buyer Protection, and we'll cover the full disputed amount for you if there are any.

The payment for this transaction is now pending in your PayPal balance awaiting confirmation from the sender. If It’s you, There's no further action required from you at this time. We'll let you know if we need any additional information.

Transaction details

   Merchant's name: Digital Decor Management & Consulting
   Merchant's transaction ID: N00OIETB57EERL
   Your transaction ID: J00NRTTI87KJWTK
   Invoice ID: INVD01-HSUR-4739-21DHJ
   Transaction date: 09 April 2022
   Transaction amount: $ 865.47 USD

If you did not authorize this charge, you have 72 hours from the date of transaction to open a dispute. For more information, We recommend you to get in touch with us.


PayPal Customer Service toll-free for the USA & CANADA +1 (786) 699 4433 or info@paypal.com

Please don't reply to this email. This mailbox is not monitored and you will not receive a response. For assistance, log in to your PayPal account and click help in the top right corner of any PayPal page.

Attack Screenshots

No items found.

Malicious Artifacts

Additional Indicators of Compromise

Type

Description

No items found.

Attack Description

This text-based fake billing scam impersonates PayPal using a suspicious account activity theme.

Analysis Overview

Tactic
No items found.
Goal
Impersonated Party
Vector
Text-based
Theme
Suspicious Account Activity
Language