Beware: PayPal Scams From ‘Genuine’ Email Addresses
Scammers are getting smarter with their tricks. Some phishing emails now actually come from a real-looking ‘service@paypal.com’ sender—an address that PayPal really uses. The scam gets more convincing when hackers use malware to spoof the authentic “From” address, making dangerous messages hard to spot.
How These Scams Work
In recent reports, scammers used:
- Spoofed sender: The email came from ‘service@paypal.com’ (see point 1 in the image).
- Plausible subject: “Set up your account profile” (2), making it look like an official request.
- A fake form: The message asks you to ‘Set up Your Profile’ (3), pushing you to click a button and enter info.
- Suspicious link: The actual link ends in something like ‘test-google-a.com’ (4)—not a real PayPal domain.
- Pressure tactics: The email states the link will expire in 24 hours (5) to force a quick reaction.
Scammers want you to fill out the form so they can steal your info, sometimes asking for cryptocurrency payments through platforms like Kraken.
How to Stay Safe
- Real PayPal emails will use your name. If you see a generic greeting, be alert.
- Check the link before clicking. Official links go to paypal.com—not odd domains ending in ‘google-a.com’ or similar.
- PayPal doesn’t use urgency tricks. If you see warnings about links expiring in 24 hours, pause and verify.
- If unsure, log in to PayPal directly. Don’t click links in emails—open PayPal in your browser and check for any alerts.
PayPal offers tips on spotting scams at their website, and security sites like Malwarebytes regularly post warnings and examples.
Extra Tip: Microsoft Edge Now Redirects to HTTPS
Microsoft Edge has a new feature that can help you avoid scammers’ unsecure sites. Version 140 of Edge automatically switches you to secure HTTPS for supported sites. To check, type edge://settings/help in your browser. Turn on ‘Automatically switch to more secure connections with Automatic HTTPS’ for even safer browsing.
Watch Out—Other Scams Are Circulating Too
Readers report scams like fake Sky TV calls promising false “Sky viewing cards,” where callers seek your personal info without you ever receiving the promised item.
If you get suspicious requests, stay cautious and warn others.
Stay smart: Always check sender addresses, never click suspicious links, and keep your browser secure. If you spot a scam, share it so others don’t get caught out.
