So I have a site that also accepts donations, every now and then I get one. Usually like 20 bucks or what not.
Not too long ago I got an email that was made to look like it came from Paypal saying that someone (the name matched a real donation) donated in error and called them asking for a refund.
Given all the Paypal related scams I pretty much question everything that looks like it comes from Paypal so I forwarded the email to them asking if it was legit or not and they just confirmed today that it was indeed a scam. Also emailed the person who donated just to ask if they did in fact ask for a refund but did not get a response yet.
The thing that got me though, the email did not have any links or anything for me to click, and anything that was in the email pointed to paypal.com. unless it was one of those weird things where it uses special characters that looks like the real ones but is not and they registered that version of the domain. Did not look into it that deeply.
1: How did the scammer know the name and info of someone who recently donated to me?
2: What would happen if I did in fact refund after getting this email?
I changed my Paypal password just to be safe, as it almost seems to me the only way for a scammer to know this info is to actually have access to my account. This may also explain the fake UPS emails I always get every time I order something online. Though I get those even for credit card orders not through Paypal, so that might be something else. There's so much spying and surveillance these days it could be a million things.
Not too long ago I got an email that was made to look like it came from Paypal saying that someone (the name matched a real donation) donated in error and called them asking for a refund.
Given all the Paypal related scams I pretty much question everything that looks like it comes from Paypal so I forwarded the email to them asking if it was legit or not and they just confirmed today that it was indeed a scam. Also emailed the person who donated just to ask if they did in fact ask for a refund but did not get a response yet.
The thing that got me though, the email did not have any links or anything for me to click, and anything that was in the email pointed to paypal.com. unless it was one of those weird things where it uses special characters that looks like the real ones but is not and they registered that version of the domain. Did not look into it that deeply.
1: How did the scammer know the name and info of someone who recently donated to me?
2: What would happen if I did in fact refund after getting this email?
I changed my Paypal password just to be safe, as it almost seems to me the only way for a scammer to know this info is to actually have access to my account. This may also explain the fake UPS emails I always get every time I order something online. Though I get those even for credit card orders not through Paypal, so that might be something else. There's so much spying and surveillance these days it could be a million things.