Phishing Key on Computer Keyboard
Home ScamsPhishing Scams PayPal ‘Payment Made Without Permission’ Phishing Email

PayPal ‘Payment Made Without Permission’ Phishing Email

by Brett M. Christensen

This email claims that PayPal is investigating a payment reversal. Supposedly, a payment you received was made without the account holder’s permission or was the result of a transaction error.

To respond to PayPal’s request for information, you are asked to click a login link and access your PayPal Resolution Center within 24 hours.

But, the email is not from PayPal. Instead, it is a phishing scam designed to steal your personal and financial information. If you click the ‘Resolution Center’ link, you will be taken to a fraudulent website designed to emulate a genuine PayPal login page.

After you ‘ log in’ on the fake site, you will be taken to a ‘Dispute Resolution’ form that asks for your name and contact details, credit card numbers, and other ID information.

When you click the ‘Submit’ button on the fake form, you may receive a message stating that the issue has now been resolved.

Meanwhile, however, all of the information you submitted can be collected by cybercriminals and used to hijack your PayPal account and commit fraudulent PayPal and credit card transactions and identity theft.

Remember that PayPal will never send you an unsolicited email demanding that you click a login link to deal with a supposed account issue. And, legitimate PayPal addresses will always address you by name. They will never use generic greetings such as ‘Dear Customer’. Nor will they use your email address in place of your name as has been done in this example.

Because PayPal, by its very nature, conducts almost all of its business via email and the web, PayPal customers are a prime target for phishing scammers. It is always safest to log in your PayPal account by entering the web address into your browser’s address bar or via an official PayPal app.
The PayPal website includes information about phishing and how you can submit suspect emails or websites.

Example

Subject: Nоtifiсation ID: 820590632

Dear [recipaint’s email address] , We’re investigating a payment reversal (Case # PP-003-698-723-466)

We recently notified you that a payment you received was made without the account holder’s permission, or was the result of a transaction error.

To help resolve this issue, log in to your PayPal account within the next 24 hours and respond to our request for information in your Resolution Center

Thanks,

PayPal Disclaimer and Confidentiality Note
This message and any accompanying attachment(s) are confidential and intended for the use of the addressee(s) only. It may contain information that is privileged, confidential and exempt from disclosure under applicable law. If you are not the intended recipient, be advised that you have received the email in error and that any use, dissemination, forwarding, printing or copying of this email is strictly prohibited. Please delete the message and notify the sender so that we may correct our records. Any views or opinions presented in this email are solely those of the author and do not necessarily represent those of CBZ Holdings Limited and/or its subsidiaries. Although this email and any attachments are believed to be free of any virus or other defects which might affect any computer or IT system into which they are received, no responsibility is accepted by CBZ Holdings Limited and/or its subsidiaries for any loss or damage arising in any way from the receipt or use thereof.

 


Importance Notice

After considerable thought and with an ache in my heart, I have decided that the time has come to close down the Hoax-Slayer website.

These days, the site does not generate enough revenue to cover expenses, and I do not have the financial resources to sustain it going forward.

Moreover, I now work long hours in a full-time and physically taxing job, so maintaining and managing the website and publishing new material has become difficult for me.

And finally, after 18 years of writing about scams and hoaxes, I feel that it is time for me to take my fingers off the keyboard and focus on other projects and pastimes.

When I first started Hoax-Slayer, I never dreamed that I would still be working on the project all these years later or that it would become such an important part of my life. It's been a fantastic and engaging experience and one that I will always treasure.

I hope that my work over the years has helped to make the Internet a little safer and thwarted the activities of at least a few scammers and malicious pranksters.

A Big Thank You

I would also like to thank all of those wonderful people who have supported the project by sharing information from the site, contributing examples of scams and hoaxes, offering suggestions, donating funds, or helping behind the scenes.

I would especially like to thank David White for his tireless contribution to the Hoax-Slayer Facebook Page over many years. David's support has been invaluable, and I can not thank him enough.

Closing Date

Hoax-Slayer will still be around for a few weeks while I wind things down. The site will go offline on May 31, 2021. While I will not be publishing any new posts, you can still access existing material on the site until the date of closure.

Thank you, one and all!

Brett Christensen,
Hoax-Slayer