PayPal users, be aware of fake PayPal email messages claiming that you have purchased Amtrak eTicket. The fake or phishing email messages are being sent by cybercriminals to trick PayPal users into clicking on a link within them that goes to a fake or phishing PayPal web page. The fake webpage will then attempt to steal PayPal credentials and credit card information. So, it is important that PayPal users remember never to click on a link to sign into their PayPal accounts. They should instead, always go directly to www.paypal.com.
The "PayPal Amtrak eTicket and Receipt for Your Trip" Phishing Scam
RE: [ New Transaction ] Amtrak eTicket and Receipt for Your 03173238 Trip - FREIBURGER reference-id: #A26BAB
services@paypal.com | ID#A26BAB <jacole.6143jana.6143kula@chongyangjok.com>
Tue 1/8/2019, 6:49 AM
SALES RECEIPT Purchased: 01/07/2019 11:51 PM PT
Thank you for your purchase.
Retain this receipt for your records.
Print the attached eTicket and carry during your trip.
Merchant ID 00745
1 Massachusetts Ave NW
Washington, DC 20001
800-USA-RAIL
Amtrak.com
Reservation Number - EA655C
We have successfully charged amount $78.20 to your PayPaI, Cancel Payment
EXETER, NH - BOSTON NRTH STA, MA (Round-Trip)
MARCH 17, 2019
Billing Information
JAMES J FREIBURGER
24 STRING BRIDGE S-8
EXETER, NH 03833
PayPaI (Purchase)
Authorization Code 3E147115N9416905U
Total $78.20
Purchase Summary - Ticket Number 0740745614017
Train 692: EXETER, NH - BOSTON (NORTH STATION), MA
Depart 9:39 AM, Saturday, March 17, 2019
3 RESERVED COACH SEATS $39.10
Ticket Terms & Conditions
SENIOR CITIZEN 65 YRS OR OLDER - ID REQUIRED
CHILD FARE
CHILD FARE
Subtotal $39.10
Train 697: BOSTON (NORTH STATION), MA - EXETER, NH
Depart 7:35 PM, Saturday, March 17, 2019
3 RESERVED COACH SEATS $39.10
Ticket Terms & Conditions
SENIOR CITIZEN 65 YRS OR OLDER - ID REQUIRED
CHILD FARE
CHILD FARE Subtotal $39.10
Total Charged by Amtrak $78.20
Passengers
James Freiburger, Eleanor Dunfeyfreiburger, Jackson Eisl
The link in the fake email message goes to a fake PayPal website that was designed by cyber criminals to trick their potential victims into entering their PayPal username, password and credit card information.
If the requested information is submitted by the potential victims, it will be sent to the cybercriminals, who will use it to steal their money and use their accounts fraudulently.
If you are tricked into submitting your PayPal credentials and credit card information on the fake web page, please change your PayPal password and contact them for help immediately. Also, contact your bank and let them know that you have submitted your credit card information on a phishing website.
Remember, never click on a link to sign into your PayPal account, always go directly to www.paypal.com and login from there.