We noticed a new login with your PayPal account associated with...

[goboso]

I'm not sure how anyone could have figured out two different passwords in a weeks time.  Could anything be generating this message other than someone actually logging into my account?  I haven't experienced it with any other online account.  

[PayPal_Olivia]

Hi @philmee95,

I would suggest running a virus scan on your computer. If there's a keylogger or other malware on your computer, a fraudster may be capturing your password changes.

Hi @goldfeld,

That sounds like it's Mint, then. The other people who reported seeing this said that it came up as the Firefox browser when Mint was accessing their accounts.

Hi @goboso,

I am not sure if Quicken logs in that way, but it's possible. I would suggest that you also run a virus scan to be on the safe side.

Thank you!

Olivia

[philmee95]

I overlooked I do use mint and quicken as well.

[inmymoment]

The same thing just happened to me.  I had an automatic renewal set up to use my PayPal account and I got this message on the same day as the renewal charge went through.  I think PayPal generates this message when the third party charged my PayPal account for this automatic renewal.

[nickiecolie29]

Same thing happened here. Got an email stating a new device they don’t recognize logged into my account from desktop chrome in Virginia. I’m in WA. Changed my password right away. Woke up this morning to another one from Singapore! I don’t have any automatic payments, haven’t used PayPal in over a year, and don’t use mint or any other program. Can’t get through to customer service because of COVID. I really doubt they were able to figure out two very hard passwords within two days but it still worries me. Should I change my password again?

[a113nsee]

I had the exact same email notification from yesterday. I read through this post and don't use Mint or Quicken or any other connected apps other than eBay. I got the message: 

"We noticed a new login with your PayPal account associated with..."

Desktop Chrome Windows 7 NT 6.1

May 12, 02:16 PM PDT

US

I don't use that OS and I didn't log in. I changed my pwd and added 2-factor. Did PayPal have a data breech or something? Even so, I can't imagine passwords are usable directly and are 1-way encrypted. Not sure what's happening, but I see a few posts here from today that are identical.

[tige321]

Oh wow,I'm noticing a lot of people are getting these today/yesterday. I don't use Mint or anything and this morning I received

Desktop Chrome Windows 7 NT 6.1

May 13, 05:43 AM PDT

Hesse,DE

[rml8105]

I messaged PayPal service and they got back to me a bit ago. The rep indicated that there was no email sent and no login from a different device. That’s a bit odd since when I logged in from my phone later on it did send another message about a new device that I know was legit. But they may have just been referring to the earlier notification when they said no activity. So it sounds like either a system glitch on their end or a very advanced spoof attempt. Though it sounds like the “spoof” email actually directed to the true PayPal site from what others have said so maybe a spoof isn’t the likely culprit. It’d be nice if we got a more definitive answer from PayPal though since this seems to impact a lot of people.

[rankhorn]

I had this exact notification yesterday, approximately an hour after yours!  I'm 100% certain I have no keylogger on my system (virus scanned/MacOS/64bit OS) and I only access Paypal from one computer.

[user345]

same thing. I've very long/strong password and got following message. I changed password, added two factor authentication. I'm worried how someone can get into such a strong password. 

New Login to PayPal
We noticed a new login with your PayPal account associated with my email address from a device we don't recognize.

Desktop Chrome Windows 7 NT 6.1

May 13, 08:09 AM PDT

US

[artemissterling]

I got this same message, here's my account of events.

I received an email with the subject "Login notification from PayPal". Since I'm using Outlook Mail by Microsoft, there is an icon of a little green exclamation mark inside a green circle just above the body of the email, with text that says "This message is from a trusted sender." So this is definitely a signed email from paypal.com. The body of the email looks 100% identical to all other emails I've received from paypal. It states:

New Login to PayPal
We noticed a new login with your PayPal account associated with [email] from a device we don't recognize.

Desktop Chrome Windows 7 NT 6.1

May 13, 04:31 AM PDT

US

If this wasn’t you, please change your password immediately and review your account for unauthorized activity.

Thanks,

PayPal

Curiously enough, the change your password email link is actually the real link to paypal.com, and all other links point to paypal. By all indications it's a 100% official email from paypal.

However, nearly three hours later at 7:16 AM I received a different email from a clearly FAKE paypal email sender (a weird email address, fake paypal email body) that stated my account has been limited and offered a fake login button. This fake paypal email also had some obfuscated text that helped it defeat the spam filter, but I digress. 

So if you ask me, I think that a hacker has somehow figured out how to trigger this foreign login notification and then use it to increase the probability of someone clicking on the phishing email sent shortly after. It's possible, and definitely makes me feel better, especially seeing so many other people posting about this right now, but one should remember there are so many accounts out there, it may just be a coincidence. In any case, I've changed my passwords on every account I have everywhere just to be safe.