cancel
Showing results for 
Search instead for 
Did you mean: 

Text from pay pai?

Highlighted
New Community Member

Text from pay pai?

Your PaypaI account has been limited due to a failed payment request. Please visit: <removed> Is this a scam? I have removed my account details until I find out what’s going on

2 REPLIES 2
Highlighted
Esteemed Advisor

Re: Text from pay pai?

@Bluebell5570 

 

Sounds like a spoof, NEVER USE ANY LINK.

Firstly if the email/text addressed you as ''Dear Member'' / ''Customer'' / ''Client'' OR your ''email address'' then that confirms its a spoof as paypal would address you by your full name eg Dear John Smith.

Secondly if there was a link OR attachment in that email/text to ''cancel'' any transaction or ''confirm'' any details then again it would be a spoof.

If there was a problem with your account Paypal would not ask you to click on an unsafe link in an email or by downloading an attachment, they would direct you to log in normally and go to the resolution or the message centre for more information.

More info here >>
https://www.paypal.com/uk/webapps/mpp/phishing
https://www.paypal.com/uk/smarthelp/article/how-would-i-spot-fake-emails-faq2340


Advice is voluntary.
Kudos / Solution appreciated.
Highlighted
New Community Member

Re: Text from pay pai?

I get these kinds of messages in my email, it's always good to immediately check the sender, they often will have a different address than their display name. Also, the body text of these messages will usually also give away the game, apart from the greeting, as the other poster has noted, you might spy some odd constructions, let's just have a look through this together:

"Dear Client,


Suspicious Activity on Your Account

Your Account information has been changed. [ Billing or Shipping Address ] As our security precautions, we need more informations from you."

I've cut off the rest of the message, but, let's just really walk through all the red flags in that second sentence. It really just is a greatest hits of phishing scams I've seen. The way that bracketed statement just sort hangs in the air awkwardly is something you don't see in pretty much anything. The rest of that sentence is just very strange English you won't find in any professional communication from a company the size of Paypal to their users. The most obvious give-away will always be the link they end these kinds of messages with. It is unusual in the first place for any business to direct you immediately to a login page from a template message, if you can determine the url is suspicious before clicking on anything, you should also take note of where the link can display it leads to, which, much like the sender's address, even though they do the work to obscure the location in the body text, they generally don't spoof the actual address. 

You had exactly the right instinct to circumvent the message entirely and login to your account in a separate page.