A PayPal phishing campaign is underway trying to steal your account information and other sensitive information that could be used for identity theft.
When PayPal detects suspicious or fraudulent activity on an account, the account will have the status set to “restricted”, which will set temporary restrictions on withdrawing, sending or receiving money.
A new SMS phishing campaign claims to be from PayPal, stating that your account has been permanently restricted unless you verify your account by clicking on a link.
“PayPal: We have permanently restricted your account. Please click on the link below to confirm,”
When you click on the attached link, you will come to a phishing page that asks you to log in to your account, as shown below.
If you log in to the phishing site, the provided PayPal credentials will be sent to the threatening actors. The phishing site then goes a step further as it will try to collect additional details from you, including name, date of birth, address, bank details and more.
The information collected is used to carry out identity theft attacks, access your other accounts or carry out targeted javelin attacks.
Yesterday, two others I know received these phishing texts, so it is a very active campaign, and everyone must take care of these messages.
Smishing scams are becoming increasingly popular, so it is always important to treat text messages that contain links as suspicious. As with all phishing emails, never click on suspicious links, but instead go to the domain of the main page to confirm if there is a problem with your account.
What should you do if you enter information on this link?
If you received this text and incorrectly logged in to your PayPal account or provided other information, you should immediately go to Paypal.com and change your password.
If you use the same password on other websites, you can also change them there.
Finally, you should look for other targeted phishing campaigns using the submitted data. BleepingComputer also suggests that you monitor your credit report to ensure that fraudulent accounts are not created under your name.
To prevent identity theft, you can also temporarily freeze your credit report to prevent banks and other companies from issuing credit under your name.