SMS saying I'll be debited. Scam ?

[Xelany]

Hello, Just got a SMS saying I'll be debited 9.99€ if I don't confirm personal infos, because of account inactivity. URL is infosecurpaypal.com I logged in, thought twice, then stopped and changed my password for the sake of security. I use Bitwarden so all my passwords are uniques. Plus I have 2FA on Paypal. So, is it a scam as I do think it is ? Best,

[kernowlass · Accepted solution]

@Xelany 

If its a spoof then NEVER USE ANY LINK OR ANY PHONE NUMBER.

Firstly if the email/text addressed you as ''Dear Member'' / ''Customer'' / ''Client'' OR your ''email address'' then that confirms its a spoof as paypal would address you by your full name eg Dear John Smith.

Secondly if there was a link OR attachment in that email/text to ''cancel'' any transaction or ''confirm'' any details then again it would be a spoof.

Also if they ask you to call the number in the email then it would be fake paypal agents trying to scam you for money to 'fix' something. 

If there was a problem with your account Paypal would not ask you to click on an unsafe link in an email / download an attachment OR phone them on a number in an email, they would direct you to log in normally and go to the resolution or the message centre for more information.

More info here >>
https://www.paypal.com/us/selfhelp/article/how-to-spot-fake-emails-faq2340/2
https://www.paypal.com/us/webapps/mpp/security/suspicious-activity

[Xelany]

Thanks for the reply. It's definitely phishing. I wonder how I ended up being targeted by such spoofing attempt. I'm very careful on those matters, but it means my phone number is known by the folks doing those scam campaigns to some degree. It's a bit worrisome to me. No harm done though. Kudos to you ! Regards,