According to this email, PayPal has put your account on a limited list because the company needs more information from you.
Supposedly, you are required to click a “confirm” button and follow the steps outlined to protect your account.
However, the email is not from PayPal and the claim that your account has been limited is untrue. Instead, the email is a phishing scam designed to steal your PayPal account login credentials, your credit card details, and a large amount of other identifying information.
A screenshot of the scam email:
The poor grammar used in the email should immediately raise suspicion. A professional company such as PayPal would never send such a strangely worded notification message. Moreover, genuine PayPal emails always address you by name. They never use generic greetings such as “Dear Client”.
Clicking the button in the email opens a fraudulent webpage that has been built to emulate the official PayPal website. The fake site includes the PayPal logo along with footer links that open the real PayPal site.
The first page on the fake site features a PayPal login box that asks you to enter your account email address and password.
After “logging in”, you will be told that you need to complete a verification process in which you confirm your billing address and credit card numbers and attach copies of “required documents”.
When you click the “Start Process” button, you will be taken through a series of forms that ask you to supply personal and financial information. You may be asked to upload copies of ID documents such as your driver’s licence.
At the end of the process, you will see a final message that claims that you have successfully removed the limit on your account.
Meanwhile, the criminals who sent the scam email can hijack your PayPal account and use it to conduct fraudulent transactions. They can also use your credit card information to commit further fraud. And, using the information and ID documents that you supplied, they may be able to steal your identity as well.
PayPal scam emails like this one are very common and take many forms. Always login to your PayPal account by entering the site address into your browser’s address bar or via a trusted app rather than by clicking a link in an email.
PayPal has information about phishing scams and how to report them on its website.