The PayPal "Subscription" Trap: How Scammers Use Fake Purchase Invoices to Steal Your Data** Beware of fake PayPal subscription emails claiming you've made a major purchase. Learn how this "Invoice Scam" works and how to protect your account from unauthorized charges.

### **The Full Story: A New Wave of Phishing**

Cybersecurity experts are warning users about a sophisticated "Invoice Phishing" campaign targeting PayPal accounts. Unlike traditional scams that use fake websites, this attack uses PayPal’s own system to send legitimate-looking notifications about "pending subscriptions" or "high-value purchases" that you never actually made.

#### **How the Scam Works**

The attack typically begins with an email that appears to come directly from **service@paypal.com**. The email informs you that a payment—usually between $400 and $999—has been authorized for a high-end product like a MacBook, a Bitcoin purchase, or a year-long antivirus subscription. The genius of this scam lies in the **"Help Center"** or **"Cancel Subscription"** phone number included in the note. Because the email comes from a real PayPal domain, it often bypasses spam filters. When a panicked user calls the number to dispute the "accidental" charge, they are connected to a scammer posing as a PayPal agent. The scammer then attempts to:

1. Gain remote access to your computer to "cancel" the transaction. 2. Trick you into logging into a fake "secure portal" to steal your password. 3. Persuade you to "refund" the money via gift cards or wire transfers.

---

### **The Solution: How to Protect Yourself**

If you receive an email regarding a suspicious PayPal subscription, **do not click any links and do not call the number provided in the email.**

#### **1. Verify via the Official App or Website**

Never trust the email alone. Open a new browser tab, go directly to `www.paypal.com`, and log in. Check your **Activity** log. If there is no record of the transaction there, the email is 100% fake.

#### **2. Report the Phishing Attempt**

Help PayPal shut down the scammers by forwarding the suspicious email to **spoof@paypal.com**. After forwarding it, delete the email from your inbox immediately.

#### **3. Check Your Active Subscriptions**

To ensure no "sneaky" recurring payments are set up, follow these steps:

* Go to **Settings** (the gear icon). * Click **Payments**. * Select **Manage Automatic Payments**. * Review the list and "Cancel" any merchants you do not recognize.

#### **4. Enable Two-Factor Authentication (2FA)**

Even if a scammer manages to get your password through a fake portal, 2FA provides a second layer of defense. Ensure you have SMS or an Authenticator App linked to your account.