PayPal Phishing Scam Notice

NOTICE: We have received many calls in the past 24 hours regarding a phishing scam including our company name and PayPal. Please follow the instructions below if you have received an email appearing to be from PayPal. We are working to alert the proper entities of this issue and will update this post periodically with any new information.

If you have received an email which appears to be from PayPal alleging an "authorized transaction" from LabelValue.com, please forward the email to spoof@paypal.com.

Do not click on any links within these emails. The url to the "Resolution Center" goes to a page at:

[ http://onlyluxury.biz/pine.html ]

which then uses a meta refresh to transfer the browser to:

[ http://allezlelosc.com/agraf/.o/sd/ ]

Which then shows a "PayPal" login page which appears to be legitimate:
Do not enter any information on this page.
The content of the email would be as follows:

From: "service@paypal.com" <notification.paypal@review.email.com>
Subject: You haven't authorized this payment.
To: "email redacted",
Date: Tue, 28 Feb 2017 20:47:00 -0500

Feb 28, 2017 08:25:56 PST | Transaction ID: 2DE29540WB094794K

Hello "email redacted",

You haven't authorized this transaction to LabelValue.com. Money won't leave your account until LabelValue.com processes your order.

Keep in mind, it may take a few moments for this transaction to appear.

----------------------------------------------------------------------
Merchant: LabelValue.com

Instructions to merchant: You haven't entered any instructions.

Amount Total: $216.00 USD
----------------------------------------------------------------------

The final payment amount may change when the merchant completes the order.

Invoice ID: 433067

Issues with this transaction?

If the payment was made without your knowledge or permission you can cancel the payment and receive a full refund.

You have 1 day from the date of the transaction to cancel the payment, click Resolution Center and confirm that you are the account holder.

Please do not reply to this email. This mailbox is not monitored and you will not receive a response.

PayPal. All rights reserved.

PayPal Email ID PP120 - eebc8d56ea8f1

A variant of the email is:

A second variant of the email is as follows:

Message:
March 2, 2017 08:25:56 PST | Transaction ID: 2DE29540WB094794K

Hello "email redacted",

You haven't authorized this transaction. Money won't leave your account until LabelValue.com processes your order.

Keep in mind, it may take a few moments for this transaction to appear.

----------------------------------------------------------------------
Merchant: LabelValue.com

Instructions to merchant: You haven't entered any instructions.

Amount Total: $181.12 USD
----------------------------------------------------------------------

Issues with this transaction?

You have 1 day from the date of the transaction to cancel the payment in the Resolution Center .

Thank you,

PayPal

PPID PP753 - 9e15f26e886a3

You can identify these emails as a phishing scam because the transaction id [ Transaction ID: 2DE29540WB094794K ] will be the same.

The emails will also appear to be from "service@paypal.com" but the actual email address is notification.paypal@review.email.com.

For more information or to report a phishing email, please visit Report a suspicious email or website.

For more information on how to spot a fake of spoofed email from PayPal please visit Recognize fraudulent emails and websites.