PayPal closes loophole that let scammers send real emails with fake purchase notices

Scammers abused a PayPal subscription pause feature to trigger legitimate [email protected] cancellation emails, then inserted fake support contact details to lure recipients into a tech support scam involving remote access and payment theft. BleepingComputer reported the scheme; PayPal has mitigated the loophole, and users are advised to avoid calling numbers in emails, report suspicious messages to [email protected], and secure affected accounts and devices.