Just thought I would tell you all about a new PayPal scam.
I have been getting scam PayPal messages for years. Ones that say I have purchased crypto for $299.99. I always delete these because they come from a fake Gmail address and have a warning in bold saying if I didn't make this transaction to call this number within 24-hours to cancel.
Here comes the new one...
I get the same exact type of fake message -- crypto for $570 -- call this number within 24 hours -- but this time it has a name in the email address, followed by [email protected]. I check the email headers and it turns out this message actually came from PayPal's servers.
I look at the message a little closer and see an official PayPal footer explaining that this is a "quote email". It turns out that PayPal allows a seller to send a quote to a buyer, but does not moderate the contents of the message. Therefore they are allowing scammers to send their fake messages through official PayPal channels.