How to Identify and Avoid Phishing Emails

URGENT SECURITY ALERT: Fake PayPal Email Scam Involving Coinbase

Online scammers are getting smarter—and more convincing. A new phishing email is making the rounds, claiming to be from PayPal’s Security Team regarding a suspicious Coinbase transaction. It’s designed to catch you off guard and exploit your fear of financial loss. If you’ve seen this message, do not engage with it.

Here’s What the Scam Email Looks Like:
Breakdown of the Email:
  • Sender Name: Helena Tompkins
  • Email Address: [email protected] (suspicious and not a verified PayPal domain)
  • Subject: “Unusual transaction involving your PayPal account”
  • Details Provided:
    • Payment Method: PayPal
    • Amount: $654.94
    • Transaction ID: #WERT5678KML
    • Exchange Platform: Coinbase
  • Action Requested: Call +1 (833) 511-0646 immediately for a refund

This email plays on panic and urgency—hallmarks of phishing attempts. The goal is to get you on the phone where the scammer can request sensitive information like your PayPal credentials, banking details, or even remote access to your computer.

How to Spot the Red Flags:
  1. Unfamiliar Email Domain: Always verify the sender’s domain. Legitimate PayPal emails come from @paypal.com, not @24hinbox.com or any generic address.
  2. Urgency and Threat Language: Phrases like “immediate action required” and warnings of financial loss are manipulative tactics to cloud your judgment.
  3. Fake Support Number: PayPal doesn’t ask customers to call random numbers for refunds. They handle disputes through your secure account dashboard.
  4. No Personalization: Authentic companies almost always address you by name and include part of your account details—not just generic language.
What To Do If You Receive This Email:
  • Do NOT call the number. It will likely connect you with a scammer.
  • Do NOT click on any links or download attachments. These could be malicious.
  • Forward the email to [email protected] for investigation.
  • Delete the email immediately after reporting.
  • Log in to your PayPal account directly from the official website to verify any claims.
Protecting Yourself From Future Phishing Attempts

Here are five quick tips to strengthen your online safety:

  1. Enable Two-Factor Authentication (2FA)
    Always use 2FA for sensitive accounts like PayPal, banks, and emails.
  2. Use a Password Manager
    These generate strong, unique passwords and make it easier to detect phishing links (they won’t autofill credentials on fake sites).
  3. Educate Yourself and Your Team
    Regularly review phishing techniques with your team, especially in business settings. Cybersecurity is a shared responsibility.
  4. Check URLs Carefully
    Hover over links (don’t click!) to preview where they lead. Look for tiny misspellings like “paypa1.com” instead of “paypal.com”.
  5. Keep Software and Antivirus Up to Date
    Security patches help close loopholes scammers might exploit.
Final Word

Phishing attacks like this are more than just annoyances—they can lead to identity theft, account takeovers, and significant financial damage. But with vigilance, awareness, and a few security best practices, you can stay ahead of the scammers.

If you or someone you know has already interacted with this message or suspects compromise, contact the legitimate PayPal support team immediately through the official website.

Scroll to Top