Post #2265827
2026-05-06 16:11 UTC
‘Scammers have figured out that #PayPal lets anyone send small amounts of money to anyone else, and that PayPal will dutifully email the recipient a notification. The scammer sends you a payout of, say, one Hungarian forint — about a quarter of a cent. PayPal's system then automatically generates and sends you a real, legitimate, fully-authenticated email confirming the transaction.’
#scam #scammers
https://www.tedcromwell.com/blog/that-pending-paypal-charge-email-is-a-scam-even-though-it-really-came-from-paypa
Replies (1)
-
@profoundlynerdy@infosec.exchange 2026-06-17 01:24
@cs@mastodon.sdf.org This is STILL a thing with PayPal? I remember getting one of these about a year ago and calling the actual PayPal support line to let them know in thought one of their mail servers had been compromised. They had a master ticket to sanitize the input of the subject line. I have it written down somewhere. Is this a case where TCS knows about the issue but can't do anything yet PayPal knows nothing about the issue because it doesn't actually communicate with the outsourcer? Not that I've ever seen that play out in real life mind you. Not once. Ever. 🙄