Suspicious email: "Action requested on your PayPal Credit account"

KOOLMedia
Contributor
Contributor

I received an email purporting to be from PayPal on April 30, 2018.

 

The big headline read “Action Needed on Your Account” and went on to say:  “We periodically review your PayPal Credit account and will need your annual income after taxes to help determine if you are eligible for future credit line increases. If we don't have this information, we may not be able to increase your credit line in the future. Providing your annual income after taxes only takes a moment, and all the information you provide is securely protected.”

 

Then a nice big blue UPDATE NOW button. Verrrryyyy suspicious, right?  So I logged into my PayPal account to see if there was perhaps a corresponding message. Nothing! Even more suspicious, right? So then I called PayPal and was told by a nice customer service person named Lamar that, yes indeed, that was a for real, valid email from PayPal. 

 

I was, and still am, flabbergasted. My question to the Community is... was I right to be suspicious of that email, and the fact that there was nothing on the website that even hinted at the action needed?

Login to Me Too
4 REPLIES 4

kernowlass
Esteemed Advisor
Esteemed Advisor

@KOOLMedia

 

Thats appalling, I have always thought that paypal never asked you to enter sensitive financial info via an unsafe link in an email.  Smiley Surprised


Advice is voluntary.
Kudos / Solution appreciated.
Login to Me Too

rkstamm
New Community Member

I received the same email. Whenever I get an email from PayPal, or anywhere else with a link, I always go to the site instead of using the link, even if it seems legitimate. I thought this was a scam since the url is epl.paypal-communication.com which seemed off.

Login to Me Too

PJTraill
Member
Member

Too true, and they fail to mention epl.paypal-communication.com on their help at https://www.paypal.com/us/smarthelp/article/how-to-spot-fake-emails-faq2340 or indeed anywhere in a search (https://www.paypal.com/us/smarthelp/search?q=epl.paypal-communication.com). I gather from various plausible sources that this domain is used for “interstitial links”, enabling them to see that you are reacting to mails and perhaps to show you some ads. It is a poor show that they do not state this.

Login to Me Too

csbc
Contributor
Contributor

I forwarded one I just got with the link https://epl.paypal-communication.com which looked phoney, and was blocked by Windscribe to, spoof@paypal.com and got an instant reply saying it was not phishing.

 

Why use such a stupid domain when they could easily have a redirect and not mention it on their security page ...

 

CC

Login to Me Too

Haven't Found your Answer?

It happens. Hit the "Login to Ask the community" button to create a question for the PayPal community.