New PayPal Scam Sends Verified Invoices With Fake Support Numbers

Hackread reports an active phishing campaign abusing PayPal's legitimate invoicing and "Money Request" features: attackers register fraudulent business accounts so PayPal-sent emails pass authentication and show the BIMI blue tick, then embed scam phone numbers in invoice notes to perform callback social-engineering. The scheme aims to trick recipients into calling a scam call center where operators request remote access (AnyDesk/TeamViewer), harvest credentials, or coerce victims into sending money; PayPal removed a reported invoice and replaced it with a scam warning.