PayPal’s “No Phish Phishing” Scandal: When $2,000 Emails Make People Easy Prey
PayPal is in hot water over a “No Phish Phishing” scam exploiting its system, tricking users with fake payment emails. With 70% of users fooled, PayPal urges password resets and 2FA. They’re also boosting security with AI to block phishing. Stay vigilant and monitor your accounts, because even $2,000 can be fishy!

Hot Take:
PayPal users may need to rethink that “No Phish” sign on their virtual door as the platform currently finds itself entangled in a “No Phish Phishing” scam. It’s like putting up a ‘Beware of Dog’ sign when your fiercest pet is a goldfish. Lesson learned: when you receive an email about an unexpected $2,000 payment, it’s probably not your lucky day—just a scammer’s!
Key Points:
- PayPal has been linked to a sophisticated phishing scam exploiting a system weakness.
- Scammers trick users with emails appearing as legitimate payment notifications.
- The scam is associated with the notorious MS Office 365 test domain.
- Success rate of the scam is about 70%, due to the convincing nature of the emails.
- PayPal is enhancing security measures, including AI technology, to combat this threat.
Already a member? Log in here