PayPal users who have received email messages like the one below, which claim their PayPal account passwords have been changed are asked not to click on the link in the email messages. This is because the link or button in the fake email messages go to a phishing website looking similar to PayPal's website, where visitors will be asked to sign into with their PayPal account. But, any attempts to sign into the fake PayPal website will send the visitors' PayPal credentials to the cybercriminals behind the phishing scam, who will hijack the accounts and use them fraudulently.
The "PayPal Account Password has been Changed" Phishing Scam
From: security@paypal.com <apc12toyourinboxfocused@dump-apc.com>
Sent: 21 July 2017 05:14
Subject: Re: Important - You've just changed your password on your PayPal account from google chrome in Toronto, Canada.
Dear Customer,
We just wanted to confirm that you've changed your password. Unfortunately, our system detected that your account has been logged from Toronto, Canada.
Please take action on your account soon. It's important that you let us know because it helps us prevent unauthorised persons from accessing the PayPal network and your account information.
Follow this step:
Log in using your account.
Go to the Resolution Center.
Provide the information requested.
Resolve Now
Thanks,
PayPal
This is why it is important that PayPal users remember never to click on a link to sign into their accounts. They should always go directly to www.paypal.com and sign-in from there instead. Once they have signed into their accounts will be notified of changes and other important updates if there is any. This will prevent them from becoming victims of phishing scams, where cyber criminals steal their credentials, hijack their accounts, steal their money, and use their accounts fraudulently.
PayPal users who have already been tricked by a phishing scam, are asked to change their passwords and contact PayPal immediately for help.