May 7, 2026, 3:27 pm | Read time: 2 minutes
A new scam is causing particular concern among PayPal users. Criminals are using genuine emails from the payment service, making their deception appear much more credible. Even experienced users could fall for the trick. However, behind the seemingly legitimate emails lies a targeted PayPal trap aimed at sensitive data.
Fraudsters have developed a method where they exploit real payment confirmations from PayPal. According to a report by “Malwarebytes,” they trigger these emails themselves by transferring a minimal amount of one Japanese yen, which is about 0.55 cents. They then manipulate the email subject line to suggest that a large payment is pending or there is a problem.
Additionally, the subject line includes a phone number to contact for inquiries. Since the email actually comes from PayPal, it appears particularly credible and stands out from classic phishing attempts, which are often recognizable by fake senders.
Fake Support Instead of PayPal
Those who call the provided phone number do not reach the official PayPal customer service but rather fraudsters. These individuals pose as company employees and specifically attempt to obtain confidential information, including login credentials or other sensitive details.
In some cases, the perpetrators even demand access to the victim’s computer. Their goal is to gain remote access and spy on further data. The fraudsters use psychological pressure, creating a sense of urgency and fear to provoke rash actions.
The scam was initially observed in the U.S. However, it can be easily adapted and applied to other countries.
Also of interest: Important PayPal feature will soon be discontinued
How to Protect Yourself
To protect against this type of fraud, users should follow some basic security rules. Phone numbers from email subject lines should generally not be called. Instead, it is advisable to check directly in your PayPal account to see if there are indeed any unusual activities.
Additionally, do not grant remote access to private devices, especially not at the request of unknown callers. In general, if pressure is applied or there is a rush, extra caution is warranted. Distrust in such situations can protect against potential harm.