PayPal Phishing Scam Notice

NOTICE: We have received many calls in the past 24 hours regarding a phishing scam including our company name and PayPal. Please follow the instructions below if you have received an email appearing to be from PayPal. We are working to alert the proper entities of this issue and will update this post periodically with any new information.




If you have received an email which appears to be from PayPal alleging an "authorized transaction" from LabelValue.com, please forward the email to spoof@paypal.com.

Do not click on any links within these emails. The url to the "Resolution Center" goes to a page at:

[ http://onlyluxury.biz/pine.html ]


which then uses a meta refresh to transfer the browser to:

[ http://allezlelosc.com/agraf/.o/sd/ ]


Which then shows a "PayPal" login page which appears to be legitimate:paypal account scam
Do not enter any information on this page.
The content of the email would be as follows:




From: "service@paypal.com" <notification.paypal@review.email.com>
Subject: You haven't authorized this payment.
To: "email redacted",
Date: Tue, 28 Feb 2017 20:47:00 -0500

 

Feb 28, 2017 08:25:56 PST | Transaction ID: 2DE29540WB094794K

 

Hello "email redacted",

 

You haven't authorized this transaction to LabelValue.com. Money won't leave your account until LabelValue.com processes your order.

 

Keep in mind, it may take a few moments for this transaction to appear.

 

----------------------------------------------------------------------
Merchant: LabelValue.com

 

Instructions to merchant: You haven't entered any instructions.

 

Amount Total: $216.00 USD
----------------------------------------------------------------------

 

The final payment amount may change when the merchant completes the order.

 

Invoice ID: 433067

 

Issues with this transaction?

 

If the payment was made without your knowledge or permission you can cancel the payment and receive a full refund.

 

You have 1 day from the date of the transaction to cancel the payment, click Resolution Center and confirm that you are the account holder.

 

Please do not reply to this email. This mailbox is not monitored and you will not receive a response.

 

PayPal. All rights reserved.

 

PayPal Email ID PP120 - eebc8d56ea8f1






A variant of the email is:





March 01, 2017 08:25:56 PST | Transaction ID: 2DE29540WB094794K

Hello "email redacted",

You haven't authorized this transaction to LabelValue.com. Money won't leave your account until LabelValue.com processes your order.

Keep in mind, it may take a few moments for this transaction to appear.

Merchant: LabelValue.com

Amount Total: $277.87 USD
----------------------------------------------------------------------
----------------------------------------------------------------------
Merchant: LabelValue.com

Amount Total: $277.87 USD
----------------------------------------------------------------------

Issues with this transaction?

You have 1 day from the date of the transaction to cancel the payment in the Resolution Center by confirming that you are the account holder.

PayPal

PayPal Email ID PP120 - eebc8d56ea8f1






A second variant of the email is as follows:




Message:
March 2, 2017 08:25:56 PST | Transaction ID: 2DE29540WB094794K

 

Hello "email redacted",

 

You haven't authorized this transaction. Money won't leave your account until LabelValue.com processes your order.

 

Keep in mind, it may take a few moments for this transaction to appear.

 

----------------------------------------------------------------------
Merchant: LabelValue.com

 

Instructions to merchant: You haven't entered any instructions.

 

Amount Total: $181.12 USD
----------------------------------------------------------------------

 

Issues with this transaction?

 

You have 1 day from the date of the transaction to cancel the payment in the Resolution Center .

 

Thank you,

 

PayPal

 

PPID PP753 - 9e15f26e886a3






You can identify these emails as a phishing scam because the transaction id [ Transaction ID: 2DE29540WB094794K ] will be the same.

The emails will also appear to be from "service@paypal.com" but the actual email address is notification.paypal@review.email.com.

For more information or to report a phishing email, please visit Report a suspicious email or website.

For more information on how to spot a fake of spoofed email from PayPal please visit Recognize fraudulent emails and websites.