Office of Information Technology
November 15, 2022
Tags Phishing Email (on campus)

PayPal Invoice (Your payment has been declined #PCY5825689)

Phish Bowl Alerts

This fake invoice included the generical Gmail sender's address, no details about the recipient's supposed account with PayPal, and an invoice embedded as an image. Note that it contained no details about the recipient (so could be sent to others as part of a mass mailing) and provided a phone number to call to "resolve the issue" that would connect you to the scammers.

From: Renewal Notice <nt8620136@gmail.com>
Date: Tue, Nov 15, 2022 at 7:40 AM
Subject: Your payment has been declined #PCY5825689
To: <josiah_carberry@brown.edu>

Hi 

Josiah Carberry

Subscription Mail : josiah_carberry@brown.edu

Order ID: PV658257090

Auto Renewal Notice 

Thank You

Screenshot of invoice supposedly from PayPal for a payment of $890.01 to BTC Inc.