Beware of PayPal Invoice Scams

Historically we’ve covered various security topics, including General Scam Avoidance. However, we’ve noticed an increase in a specific scam involving fake invoices sent through PayPal. Beware it is actually a Phish, definitely not Spam!

How the Scam Works

Scammers are now send fraudulent invoices which are particularly deceptive because they are sent directly through PayPal. Hence, that means that they appear legitimate and bypass standard spam filters. Many phishing emails that have poor grammar, fake logos, or overly urgent language; and therefore of which is that they are easier to spot. One might also fall for these scam invoices because they are often well-crafted and professional in appearance.

Scammers exploit PayPal’s trusted platform to send invoices that seem genuine, thus making it harder for recipients to identify them as fraudulent. The details may include:

• Recognizable Brand Names: Some invoices are forged to appear as if they come from well-known companies like Apple, Amazon, or other trusted brands.
• Convincing Details: The invoice may include order numbers, transaction IDs, or product names that sound plausible.
• Suspicious Sender Information: While the invoice itself looks legitimate, you may notice oddities in the sender’s name or email address, such as slight misspellings or inconsistencies.

Scammers often include a phone number on the invoice, urging you to call if you have questions. This is a key part of the scam. When you call, the scammer will attempt to convince you that the invoice is real. A common tactic is using high-pressure tactics or claiming that your account has been compromised.

These tactics make the scam difficult to detect at first glance, especially for users who are accustomed to trusting PayPal’s notifications. PayPal has some advice here.

What to Do if You Receive One

• Verify the Invoice: Do not pay a PayPal invoice unless you can confirm it’s tied to something you’ve ordered.
• Don’t Call the Listed Number: Scammers will attempt to convince you the invoice is legitimate when you call the number.
• Report It: Use the “Report this invoice” link at the bottom of the email to notify PayPal. You can also forward the email to phishing@paypal.com.
• Avoid Marking as Spam: Flagging the invoice as spam can interfere with legitimate PayPal messages.

(Featured image by iStock.com/Moostocker)