Phony Invoices: PayPal

Phish Bowl Alerts

More variations on the phony invoice, these for a purchase using PayPal. It alerts the recipient they have 24 hours to dispute the charge, or that amount will be deducted from their account. If you receive this or a similar scam, mark it as phishing to alert Gmail administrators.

==========================================================
From: Order Update <lenjack657@gmail.com>
Date: Wed, Oct 25, 2023, 6:35 PM
Subject: Thank you for your purchase!
To: <josiah_carberry@brown.edu>

Hello, josiah_carberry@brown.edu.
Thank you for your purchase!
Your order has been accepted.

In relation to

Billing Group

Screenshot of notification of a successful charge to the recipient's PayPal account for $830.00, with a number provided "If you did not authorize this transaction and want more details."

==========================================================
From: Steve Smith <stevesmith61105@gmail.com>
Date: Wed, Oct 25, 2023 at 9:33 AM
Subject:
To:

Screenshot of invoice from PayPal for the purchase of $499.99 of anti-virus protection

==========================================================
From: Purchas SSNJ <adfghjtyehrujyhut@gmail.com>
Date: Mon, Oct 16, 2023 at 10:23 AM
Subject: Service Confirmaton #ZASVHX
To: <Josiah_Carberry@brown.edu>

Hey Josiah_Carberry
Thanks for choosing this product 8852399. Please take a moment to review the details. If you have any questions, please don't hesitate to ask.

[ ATTACHMENT: KU81TYW8.pdf ]

Content includes a PayPal logo, customer service phone number, and notifies the recipient that "We are pleased to provide you with the proof of purchase for your WF1000 TWS with an additional 12+3 months... for a charge of $307.66." If offers the option to call the number to "simply inform our representative about your decision to cancel."

Screenshot of invoice from PayPal for purchase of software, with content described above

==========================================================
From: Wesley <dunn.wesley.653418@gmail.com> or
Clinton <barnett.clinton.089156@gmail.com> or
Allen <howard.allen540@gmail.com> or
Jessie <olsonjessie.720479@gmail.com> (and many others)
Date: Wed, Sep 20, 2023 at 11:38 AM
Subject: ANNUALLY PLAN RENEWAL CHARGES E-RECEIPT IS ATTACHED-SDFFE-25145. or
Your Membership Renewal Billing Copy Has Been Attached Here-@#DF5G48G4#@ or
Premium Plan Renewal E-Receipt Has Been Generated-@#2545425#@ or
YOUR PREMIUM PLAN RENEWAL E-BILLING COPY-CVBFR-21542. (and other variations)
To:

321564

Screenshot of invoice from PayPal for purchase of McAfee Subscription

==========================================================
From: Hurley MS Assoc <andradezjoplin226g@gmail.com>
Date: Mon, Jul 31, 2023 at 9:20 AM
Subject: Notice doc HP82388
To: <josiah_carberry@brown.edu>

We value your ongoing support and dedication to our goal. For more details please search the attachment below quickly.

Screenshot of invoice from PayPal for Symantec Norton Advisors purchase of security software.

==========================================================
From: Michetti Nicolas <jonathonatticuseewsvcx3@gmail.com>
Date: Thu, Jun 29, 2023 at 3:25 PM
Subject: Regarding your payment information@3456-SADF-4567-GFHJ
To:

THANK YOU SO MUCH#SADF-3456-FGHJ-5467

Screenshot of invoice from PayPal for $441.98 purchase with number to call "If you did not recognize this transaction or want to cancel these charges."

==========================================================
From: Snufji Groride <snufjigroride@gmail.com>
Date: Tue, May 16, 2023 at 4:20 PM
Subject: Your order Your payment confirmation.GETHDS-568489
To:

#589065-BFJFDD

Screenshot of notice from PayPal of charge of USD 499.00 to be deducted day following invoice

==========================================================
From: Sean Cox <seancoxmw62@gmail.com>
Date: Tue, May 9, 2023 at 2:09 PM
Subject: Order has been confirmed@467686-DJGHKD-893465-YROEUW
To:

#548646-89467-87365

Screenshot of fake PayPal invoice for $419 charge that will be deducted within 24 hours. Call number provided to cancel.