MailRoute Identifies Sophisticated PayPal Phishing Scam

MailRoute issued an alert regarding a sophisticated new scam targeting email users worldwide through PayPal's invoice system, coming from PayPal servers

LOS ANGELES, CA, UNITED STATES, December 12, 2024 /EINPresswire.com/ -- MailRoute, a leading email security provider, today issued an alert regarding a sophisticated new scam targeting email users worldwide through PayPal's invoice system. The company has identified a complex fraud scheme that exploits legitimate PayPal infrastructure to deceive users.

The scam operates by manipulating PayPal's genuine invoice system, where fraudsters create authentic invoices containing deceptive customer service phone numbers. When unsuspecting recipients call these numbers, they are connected with scammers who attempt to steal their financial information. What makes this scheme particularly dangerous is that the fraudulent communications pass standard authentication checks and originate from legitimate PayPal servers.

"This is not your typical phishing scam," said Claire Warren, Director of Technical Support at MailRoute. "The fraudsters have found a way to abuse legitimate systems, making traditional detection methods less effective. The emails contain valid DKIM signatures and are being forwarded through trusted providers like Microsoft Office 365."

To protect against this threat, MailRoute advises users to:
1. Never call phone numbers listed in PayPal invoices or seller's notes
2. Access PayPal accounts directly through the official website to verify charges
3. Use only official contact information from PayPal's website
4. Report suspicious invoices through PayPal's fraud reporting system.

MailRoute is actively collaborating with PayPal and Microsoft to address this industry-wide challenge. The company's spam filtering team is working to enhance detection capabilities while advocating for stricter controls on PayPal's invoice system and improved forwarded message screening by major email providers.

MailRoute customers who receive suspicious PayPal invoices are encouraged to report them to PayPal and MailRoute's support team, to aid in improving detection mechanisms.

About MailRoute
MailRoute employs the leading innovators in this industry to protect customers from malicious attacks and downtime. Since 1997, the team has set new standards with fully redundant and configurable email security services for all industries, including the US military and its contractors.

Rachel Plecas
MailRoute, Inc
+1 310-997-2354
rplecas@mailroute.net