Skip to main content

Phish Report: "You sent a $399.99 USD payment" and other fake Paypal notices

Send Details:

Dates Sent: January 31st - February 10th, 2025

From: Scammers via Paypal <service@paypal.com>

Subject: "You sent a $399.99 USD payment", "You sent a payment", "You've got a money request", and other similar subject lines

 

Message example 1: You sent a $399.99 USD payment

You sent $399.99 USD to [Name]

YOUR NOTE TO [Name]

PayPal has detected some unusual activity on your account. After sending money, someone has archived the transaction history, making it invisible to you. If you did send money, please ignore this message. However, if you did not send any money, please call immediately at-I(888) 5O4-O77I to request a refund.

Transaction Details

Transaction ID
90F12216J9900493H    Transaction date
February 10, 2025
Money sent    $399.99 USD
Fee    $0.00 USD
Paid with:

BANK OF AMERICA, N.A.    $399.99 USD
You paid    $399.99 USD
[Name] will receive    $399.99 USD

 

Message example 2: "You've got a money request"

[Name] sent you a money request

Payment request details
Amount requested
$3,499.99 USD

Note from [Name]:
We have detected unusual login activity on your PayPal account along with unauthorized transaction attempts from various locations. To ensure your account’s security, please contact PayPal immediately at (888) 86O O8I4.

Transaction ID
U-1A194131P2995251Y

Transaction date
February 7, 2025

 

Message example 3: "You've sent a money request"

Hello, Beachfront Paradise of Florida LLC

You requested $899.99 USD from Pay-Pal as a loan to pay your pending balance at the Apple Store.

YOUR NOTE TO Pay-Pal as a loan to pay your pending balance at the Apple Store. :

If you have any questions, please don’t hesitate to contact us immediately at-I(888) 258-2OIO

Payment request details

Transaction ID: U-5SU347335N6744601
January 31, 2025

Amount requested
$899.99 USD

You can request a different amount, send a friendly reminder, or cancel your request if you've changed your mind.

 

How can these be coming from real PayPal email addresses?

PayPal includes a comment section for people to enter freeform text when sending invoices or requests for money to people, normally to include a note from the sender. These requests get sent to the would-be victim from PayPal, so they’ll pass the anti-spam measures and be signed by PayPal.

Learn more about common PayPal scams.