New virtual scam by PayPal: they impersonate identity and steal bank information

In this type of scam, cybercriminals send an order confirmation from PayPal, which appears to be legitimate, but is fake

By iProfessional

06/22/2022 – 8:48 p.m.

Avanan, a company owned by Check Point Software Technologies, uncovered a scam in which cybercriminals spoof PayPal identity to get the phone number and Bank data of the victims.

From the security solutions provider they have announced that these fraudulent attacks have similar characteristics with those registered a few months ago with another well-known brand such as amazon.

How is this new PayPal scam

In this threat, cybercriminals andThey send an order confirmation of PayPal apparently legitimatein which users who have purchased more than 500 dollars on the cryptocurrency based on DogeCoin blockchain.

Via PauPal

Through a fake PayPal request, cybercriminals steal victims’ bank account details

For cancel the orderusers have the option of calling a support or customer service number, a fake phone with which they contact the cyber criminals.

Since advance have reported that the contact number appearing in these fraudulent emails is based in Hawaii, United States, and has previously been associated with other scams.

In addition to having access to victims’ financial information, scammers can attack them in different ways with their respective phone numbers, from text messages to calls or messages WhatsApp.

However, the main objective of cyber scammers is to access the bank details of their victims, so when they call that number, they will be instructed to give the credit card number and CVV to cancel the charge.


Scammers want victims to call a number they provide themselves

This scam usually works

This attack usually works because there is no link in the body of the email, which could be filtered as malicious if the email has a security solution.

The big payment brands are some of the most supplanted because Internet users tend to trust their emails. […] Companies like PayPal, Amazon or Microsoft they are a clear objective, so extreme attention must be paid to any entity that asks for personal data,” the technical director of Check Point Software for Spain and Portugal, Eusebio Nieva, told Europa Press.

This fake email from PayPal aims to induce users to call a fictitious telephone number to reverse the charge.


From the company they recommend checking the account and looking carefully at the sender’s address

What to do if you receive this type of e-mail

From the company they advise users, in case they receive an email of these characteristics, check the PayPal account and look at the sender’s email address.

In addition, they affirm that it is convenient not to include companies of these characteristics in the lists of Allowed in the inbox, since they tend to be among the most supplanted.

Leave a Comment