PayPal subscriptions abused to send fake purchase emails
PayPal's "Subscriptions" billing mechanism is being abused by an email scammer to send genuine PayPal emails with phony purchase notifications included in the Customer support URL field.
People have reported getting emails from PayPal saying, "Your automatic payment is no longer active," throughout the last few months [1, 2].
The email has a customer service URL section that has been altered in some way to say that you bought a costly item, like an iPhone, MacBook, or Sony device.
This text contains a domain name, a notification that a payment of between $1,300 and $1,600 was made (the exact amount varies by email), and a phone number for payment cancellation or dispute. To try to avoid spam filters and keyword identification, the text contains numerous Unicode characters read mo...
