Phishing email with actual Paypal address as sender?

[JoeUrban]

Just received an email with a message that indicates it's almost certainly a phishing attempt (poor grammar, "toll free" phone # which is foreign.

But it includes a legit Paypal invoice and the header indicates it's coming from an actual Paypal email address.

In this screenshot I hovered over the "View and Pay Invoice" link and it is a legit Paypal link.

Spoofed sender? Or are they using a Paypal account to send fake invoices to users?

[kernowlass · Accepted solution]

@JoeUrban 

Scam money request or invoice that can  sometimes show in your Paypal account..

Scammers harvest email addresses and send out money requests or invoices hoping that some of those email addresses are linked to an open Paypal account.

The unsuspecting recipient is given a fake Paypal phone number in the 'notes' section added by the scammer.
If you did call that number (DO NOT) to query the transaction the scammer tells you that they need to access your computer / Paypal account to cancel that transaction for you.
They will then hack your computer or Paypal account.

Paypal never put phone numbers on emails or in money requests/invoices, they tell you to contact them via help/contact bottom of their website pages.

If there is a cancel option then cancel it, if not ignore it and it should time out at 30 days.
As long as you don't click to pay it then no money would be transferred.

[JoeUrban]

Thanks. Very sneaky.