Scam email received to my PayPal correct email address.

[HollyMax]

I received a Scam email about a bogus transaction, however it was received to my correct PayPal email address.

How can this information be accessed by the Scammers?  Has PayPal been compromised?

I know for a fact neither my Mail Server, Computer or Phone have been accessed, and the email address (which is just for the PayPal account) never given out.  I am a computer technician, and security conscious.

[kernowlass]

@HollyMax 

I can only give you the facts, not the intelligence to understand those facts unfortunately.  😒

[HollyMax]

OK, I'm sorry you don't have the intelligence to understand the facts, and I prefer you don't make replies when you clearly don't understand the question I'm asking.

[kernowlass]

@HollyMax 

Oh dear  😂

[Avnchief]

Same email. Even has PayPal trademark.

[kernowlass]

@Avnchief 

Scammers are clever in copying paypal type emails.

[HollyMax]

Thanks for the reply Avnchief.  Creating the copy of a PayPal email is a very simple task that even school kids can do unfortunately. 

How they first can get the email address of a closed mailbox that is only used for PayPal would suggest PayPal has/is being compromised, or the mailbox has been compromised.

Unlikely a compromised mailbox would be lucky enough for the hacker to use just for sending a scam PayPal email.

[kernowlass]

@HollyMax 

quoted.

How they first can get the email address of a closed mailbox that is only used for PayPal would suggest PayPal has/is being compromised, or the mailbox has been compromised.

😅  Again, oh dear !!

[Aguy3141]

To @kernowlass 

Had to actually log in to ensure you are aware that people read your replies and understand you are a sad and useless entity. What’s more unfortunate is you probably can’t perceive this as your blinded by arrogance/ego/ineptitude likely built up by way too much time alone.

To @HollyMax 

 That being said, a core part of SOC2 compliance is protecting user data. No, scammers are not just guessing a wide amount of email addresses to send to, and no, the user email from PayPal should not be shareable to others interacting with PayPal. So likely there is/was a lack in security either from the email providers side, or PayPal itself. These entities have a responsibility to report this, if they were even aware of a compromise, but they also tend to be the ones that can prove it. And with the philosophy of profits at all cost it’s easy for a large company to get away with not reporting and not potentially reducing their reputation. Because all of this cannot technically be proved, you can do not rely on my reply as opinion. Also @kernowlass … just be better hmm? Your replies will be to an empty void. Take care OP

[kernowlass]

@Aguy3141 

😂