A new PayPal scam is tricking users by sending real invoices directly through PayPal’s system, making the emails look completely legitimate. Scammers open fake PayPal Business accounts, which allows them to send genuine PayPal invoices that bypass traditional spam filters. The invoice includes a link to “View and Pay Invoice” — which actually takes victims to PayPal — along with a fake customer service number. When victims call the number, scammers posing as PayPal representatives convince them to download remote access software to “fix” the issue. Once installed, the scammer gains full control of the victim’s device, exposing passwords, financial accounts, and personal data.

This scam is particularly dangerous because it exploits trust in PayPal’s platform and mimics the behavior of authentic customer service interactions. Victims may believe they are dealing with PayPal because the invoice originates from PayPal’s servers, but in reality, the customer service line connects directly to the scammer. Once remote access is granted, cybercriminals can steal sensitive data, install malware, or lock users out of their own accounts.