Scam pattern
Fake PayPal / invoice scam
A real-looking invoice or “you were charged” email
You get a genuine-looking invoice or payment-confirmation email for something you didn't buy, with a “call this number to dispute” line. The number reaches scammers who talk you into refunds, remote access, or gift cards.
How it’s usually worded
- “You sent a payment of $499.99 for [crypto/electronics].”
- “Didn't authorize this? Call 1-8XX-XXX-XXXX to cancel.”
- “Install this tool so we can process your refund.”
Red-flag signals
- A charge you didn't make
Panic over an unexpected debit makes you call the included number.
- “Call to dispute”
The phone number is the trap — it routes to the scammer, not PayPal.
- Remote-access tools
AnyDesk/TeamViewer requests let them watch you move money.
- Refund → overpay
They “accidentally” refund too much and demand the difference back.
What to do
Don't call numbers inside the email. Log in to PayPal (or your bank) directly to check for real activity. Never install remote-access software for a “refund.”
Got one like this? Check it now.
Paste your version below for an instant RED / YELLOW / GREEN verdict.
FAQ
The invoice looks real — could it be legit?
Scammers send genuine-looking (or even real PayPal) invoices for purchases you never made. Verify only by logging in directly, never via the email's phone number or link.
Why do they want remote access?
To watch your screen, open your banking, and trick you into authorizing transfers or “correcting” a fake overpayment.