Office of Information Technology
February 22, 2023
Tags Phishing Email (on campus)

PayPal Payment Confirmation

Phish Bowl Alerts

Watch out for this variation on the phony PayPal invoice. This one attempts to reproduce a more believable payment statement that includes the recipient's postal address. Mark it as phishing if you receive it (open the message in a browser, click on the stack of three dots to the right of the REPLY button and select "Report phishing") and also alert PayPal by forwarding it to phishing@paypal.com.

From: Matthew M. Brown <xsjbajans283782@gmail.com>
Date: Tue, Feb 21, 2023 at 3:40 PM
Subject: Payment Confirmation
To: <josiah_carberry@brown.edu>

PAYPAL - INVOICE - United States, 108 Jockey Hollow Road, Zionsville, IN 46077

TRANSACTION DETAILS
ORDER ID: BJFHJHFIHA-36758
RECEIPT ID: B7AHSMM1

BILLING DETAILS
NAME: Josiah Carberry
DATE: 21st February 2023
ADDRESS: 1234 Main Street, Providence, RI 02903

ORDER SUMMARY
PRODUCT DESCRIPTION
Industrial Tools 15 Pc Er40 Collet Set Plus 1 pc R8 Bridgeport Shank Holder and a Wrench in Fitted Box, 0223-0984
PRICE $256.78
QTY. 2
AMOUNT $513.56

TAX (9%): 46.22
TOTAL: 559.78

NEED HELP?
We appreciate your business and invite you to contact us at the following 24/7 hotline number if you have any questions about your order.-#8885860375

Thank you for your order!

 

Screenshot of phony PayPal invoice, whose full content is above