{"id":82925,"date":"2017-12-05T17:04:51","date_gmt":"2017-12-06T01:04:51","guid":{"rendered":"https:\/\/securingtomorrow.mcafee.com\/?p=82925"},"modified":"2025-08-31T19:33:45","modified_gmt":"2025-09-01T02:33:45","slug":"paypal-phishing-scam","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/internet-security\/paypal-phishing-scam\/","title":{"rendered":"PayPal Users: Here’s What You Need to Know About the New Phishing Scam"},"content":{"rendered":"

It\u2019s the season of giving, which means internet scams are practically everywhere<\/a>, as cybercriminals are trying to trick eager holiday shoppers<\/a>. So, it\u2019s unsurprising that yet another scam has\u00a0emerged<\/a>, this time targeting millions of PayPal users with manipulative phishing emails. The emails, which are intended to look like they\u2019re from customer support, are trying to convince users<\/a> to validate fake transactions.<\/p>\n

How it works<\/strong><\/h2>\n

This phishing scam does a pretty good job at seeming believable. The email leverages the PayPal logo and the sender’s address appears to be\u00a0service@paypal.com<\/a>. Additionally, an order number is referenced and the message claims that the user needs to click a link in order to verify the transaction. The order number is entirely fake, and the link actually leads users to\u00a0epauypal.com<\/strong>.<\/p>\n

From there, victims are lead through an authentication process that asks for name, date of birth, address, mother’s maiden name, and a credit card number. What\u2019s more — the site has a valid SSL certificate, which is the green lock icon in the corner of your browser that indicates that you are connected to the address shown in the address bar.<\/p>\n

How to stay protected<\/strong><\/h2>\n

Fortunately, there are a few key indicators that reveal the scam\u2019s true colors. First off, the header bar on epauypal.com is missing a \u201chelp\u201d link. There\u2019s also no alarm bell for notifications or a gear icon that you can use to update your settings. Plus, normal verification procedures don\u2019t typically involve an additional form like the one from epauypal.com. So be sure to keep an eye out for all these red flags.<\/a><\/p>\n

However, beyond staying aware of these indicators, there are a few other things users can do to stay protected from this malicious phishing scam:<\/p>\n