4 ms·

I got one of these emails a few weeks ago. It looked real and passed Gmail's filters but when I logged into my account separately there were no invoices. I had

by fotta 4y ago

I got one of these emails a few weeks ago. It looked real and passed Gmail's filters but when I logged into my account separately there were no invoices. I had never gotten an invoice from PayPal before so it smelled fishy. Reported it to phishing@.

bcrescimanno 4y ago
Former PayPal employee here. In truth, you got the best possible experience and it's good that you reported it. Ultimately, what would happen internally is that we'd detect this malicious use and cancel the invoices so it's not possible for the scammer to continue to collect on them--but we couldn't "claw back" the emails that had already gone out. The email looked legit because it was an email from PayPal about a real invoice. I don't know if they should be more proactive in their communication with folks in this situation and it's been over a year since I left; but, this is not a new issue at all and it's something we would contend with from time to time while I was there.
gxqoz 4y ago
Yeah this is exactly what happened to me, although I didn't report to phishing. It both looked real and like a phishing attempt and after independently logging into my Paypal account and not seeing anything I concluded it was definitely phishing. Pretty terrible of the Paypal system to allow this to happen though.
justbaker 4y ago
I got one too and reported it as well. I called the number in the email wondering, trying to figure out scam or legit account compromised. The person who answered initially started saying answer as some other company, debt collection I believe, then corrected to PayPal. To resolve it and report the claim he asked what operating system and browser I used and instructed me to download a Remote Desktop app, which I found fishy and tipped me off it’s definitely phishing. I didn’t say much while I searched the number/figured out if it was common and the guy on the phone got angry yelling “hello??” Several times. I hung up and they called back twice. I wish I kept the number to call them back and piss them off. Scammers/phishers are soulless entities of this earth.

by fotta 4y ago

bcrescimanno 4y ago

Former PayPal employee here. In truth, you got the best possible experience and it's good that you reported it. Ultimately, what would happen internally is that we'd detect this malicious use and cancel the invoices so it's not possible for the scammer to continue to collect on them--but we couldn't "claw back" the emails that had already gone out. The email looked legit because it was an email from PayPal about a real invoice. I don't know if they should be more proactive in their communication with folks in this situation and it's been over a year since I left; but, this is not a new issue at all and it's something we would contend with from time to time while I was there.

gxqoz 4y ago

Yeah this is exactly what happened to me, although I didn't report to phishing. It both looked real and like a phishing attempt and after independently logging into my Paypal account and not seeing anything I concluded it was definitely phishing. Pretty terrible of the Paypal system to allow this to happen though.

justbaker 4y ago

I got one too and reported it as well. I called the number in the email wondering, trying to figure out scam or legit account compromised. The person who answered initially started saying answer as some other company, debt collection I believe, then corrected to PayPal. To resolve it and report the claim he asked what operating system and browser I used and instructed me to download a Remote Desktop app, which I found fishy and tipped me off it’s definitely phishing. I didn’t say much while I searched the number/figured out if it was common and the guy on the phone got angry yelling “hello??” Several times. I hung up and they called back twice. I wish I kept the number to call them back and piss them off. Scammers/phishers are soulless entities of this earth.