What is this Paypal scam trying to do?

Red Squirrel

No Lifer
May 24, 2003
70,592
13,807
126
www.anyf.ca
So I have a site that also accepts donations, every now and then I get one. Usually like 20 bucks or what not.

Not too long ago I got an email that was made to look like it came from Paypal saying that someone (the name matched a real donation) donated in error and called them asking for a refund.

Given all the Paypal related scams I pretty much question everything that looks like it comes from Paypal so I forwarded the email to them asking if it was legit or not and they just confirmed today that it was indeed a scam. Also emailed the person who donated just to ask if they did in fact ask for a refund but did not get a response yet.

The thing that got me though, the email did not have any links or anything for me to click, and anything that was in the email pointed to paypal.com. unless it was one of those weird things where it uses special characters that looks like the real ones but is not and they registered that version of the domain. Did not look into it that deeply.

1: How did the scammer know the name and info of someone who recently donated to me?

2: What would happen if I did in fact refund after getting this email?

I changed my Paypal password just to be safe, as it almost seems to me the only way for a scammer to know this info is to actually have access to my account. This may also explain the fake UPS emails I always get every time I order something online. Though I get those even for credit card orders not through Paypal, so that might be something else. There's so much spying and surveillance these days it could be a million things.
 

Craig234

Lifer
May 1, 2006
38,548
350
126
"1: How did the scammer know the name and info of someone who recently donated to me?"

My guess is they had hacked THEIR computer and saw the donation.

"2: What would happen if I did in fact refund after getting this email?"

Maybe if they had hacked that computer, they had some way to get the refund.

So, I'd not trust e-mail received from that person's account.

See if you can talk to them on the phone.
 

Red Squirrel

No Lifer
May 24, 2003
70,592
13,807
126
www.anyf.ca
Hmmm right never considered that their computer or simply their email account may have been hacked. Hopefully I don't end up being the suspect given the last transaction was with me lol.