- access credentials<\/li>
- private information, including\nyour mailing address<\/li>
- credit or debit card\ninformation<\/li>
- email account login information\n <\/li><\/ul>\n\n\n\n
So, just how does this PayPal phishing email scam work?<\/p>\n\n\n\n
Let\u2019s hash it out.<\/span><\/p>\n\n\n\n
How the Latest PayPal Phishing Email Scam Snares Victims<\/h2>\n\n\n\n
Presenting the Bait<\/h3>\n\n\n\n
Humans are funny animals. As a species, we possess the most\ncomplex type of brain and have an even more complex psychology working behind\nit. However, we tend to behave so predictably in certain situations. Hackers\nand scamsters understand this quite well, and they are exceptional at using\nthis truth to their advantage. They do this through the use of phishing scams. <\/p>\n\n\n\n
The latest PayPal phishing email scam is no different in this regard, except that it chooses a smarter way to go about it. <\/p>\n\n\n\n
<\/span><\/span><\/p>\n\n\n\n
As it goes with most phishing scams, it all starts with an\nemail. This email (somewhat) looks as if it has come from PayPal and instills\nfear by “informing” you of an unusual login from an unknown device.\nThen it tells you to secure your account to avoid any potential financial loss.\n<\/p>\n\n\n\n
Here\u2019s how it looks:<\/p>\n\n\n\n
![\"Screenshot:](\"https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2019\/12\/paypal-phishing-emal1v2.png\")
Image source: https:\/\/www.welivesecurity.com\/wp-content\/uploads\/2019\/12\/Fig-1.png<\/figcaption><\/figure><\/div>\n\n\n\n Pulling the Rod<\/h3>\n\n\n\n
Once a user has been hooked, it’s time for the cybercriminal to pull the rod. In the context of this scam, once the user has clicked on the link provided in the email, they\u2019re taken to a website that\u2019s designed to look like PayPal\u2019s official website. This web page, often written in poor English, tells you that they (PayPal) have noticed some unusual activity on your account and asks you to enter a captcha code to proceed further. One thing to note here is that instead of leading you straight to a (fake) login page, fraudsters ask you to enter a captcha code. Psychologically, this is a smart move. It\u2019s like playing it \u201ctrue\u201d before bluffing in poker. All poker players would get this. <\/p>\n\n\n\n
Another thing to note here is that the web page where you’re taken has a “secure” padlock in front of its URL bar. Users who’re educated to look for the padlock security indicator, will likely consider this website to be a safe website. Here\u2019s how this web page looks:<\/p>\n\n\n\n
![\"\"](\"https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2019\/12\/paypal-phishing-email2.png\")
Image source: https:\/\/www.welivesecurity.com\/wp-content\/uploads\/2019\/12\/Fig-2-768×656.jpg <\/figcaption><\/figure><\/div>\n\n\n\n If you fall prey to this plot, you\u2019re taken to a fake PayPal login page, and you’re asked to log into your account. This page looks exactly like the real PayPal login page. First, you’re asked for your user name, and then you’re asked for your password, just like you’re asked on the official PayPal website.<\/p>\n\n\n\n
![\"\"](\"https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2019\/12\/paypal-phishing-email3-1.png\")
Image source: https:\/\/www.welivesecurity.com\/wp-content\/uploads\/2019\/12\/Fig-3-768×492.png<\/figcaption><\/figure><\/div>\n\n\n\n ![\"\"](\"https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2019\/12\/paypal-phishing-email3.png\")
Image source: https:\/\/www.welivesecurity.com\/wp-content\/uploads\/2019\/12\/Fig-4-768×553.png<\/figcaption><\/figure><\/div>\n\n\n\n Once You\u2019re Hooked: Going Beyond Your Credentials<\/h2>\n\n\n\n
You know what happens when you click on the Log In<\/strong> button after entering \u2014 er, giving away \u2014 your credentials, don’t you? However, your PayPal user information is not the only<\/em> thing the phishers are after in this particular PayPal phishing scam. Once you log in, you’re asked to verify your account. Like the previous page, this page, too, is written in poor English. It prompts you to click on the Continue to PayPal<\/strong> button. <\/p>\n\n\n\n
Once you click on that button, the next phase of this PayPal phishing email scam takes you to a series of web pages that ask you for your personal information such as home address and financial information. In the end, you’re once again asked to enter your PayPal credentials to “link an email account.” Check out the screenshots for the details.<\/p>\n\n\n\n
![\"\"](\"https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2019\/12\/paypal-phishing-email5.png\")
Image source: https:\/\/www.welivesecurity.com\/wp-content\/uploads\/2019\/12\/Fig-6-768×652.jpg <\/figcaption><\/figure><\/div>\n\n\n\n ![\"\"](\"https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2019\/12\/paypal-phishing-email6.png\")
Image source: https:\/\/www.welivesecurity.com\/wp-content\/uploads\/2019\/12\/Fig-7-768×634.jpg <\/figcaption><\/figure><\/div>\n\n\n\n ![\"\"](\"https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2019\/12\/paypal-phishing-email7.png\")
Image source: https:\/\/www.welivesecurity.com\/wp-content\/uploads\/2019\/12\/Fig-8-768×650.jpg<\/figcaption><\/figure><\/div>\n\n\n\n ![\"\"](\"https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2019\/12\/paypal-phishing-email8.png\")
Image source: https:\/\/www.welivesecurity.com\/wp-content\/uploads\/2019\/12\/Fig-9-768×643.jpg <\/figcaption><\/figure><\/div>\n\n\n\n Once you do all of this, then a message displays that tells you that you\u2019ve successfully restored your account. However, this couldn\u2019t be further from the truth \u2014 what you have done is virtually wrap up your identity into a nice, pretty little package and handed it over to the cybercriminal. Now, your information is available for them to misuse through various forms of fraud. That’s the outcome of the latest PayPal phishing email scam.<\/p>\n\n\n\n
A Final Word<\/h2>\n\n\n\n
No matter how we curse hackers and fraudsters, we have to\nacknowledge that they’re quite smart (barring their English) when it comes to\nfooling us. They know our pain points, they know what our brains respond to\nspecific situations, and they know how ignorant or unobservant we can be. We\u2019re\nlike fish taking the shiny bait they throw out to capture us. Now you know why\nthey call it “phish\u201ding. <\/p>\n\n\n\n