Fake PayPal email wants your login
A PayPal-themed phishing email from avvv.fr is trying to push you into clicking a fake account confirmation link.
You may see an email with a blank subject line that looks like it came from PayPal, using familiar blue branding and standard formatting. It tells you to review your account information and pushes you toward a button or link labelled Confirm Account, designed to make you act before you think.
What gives it away is that the sending domain is avvv.fr, not PayPal, and the mail systems checking it could not properly verify that it was authorised to send on the brand's behalf. In plain terms, the message failed the trust checks that help prove who really sent it. The domain itself is old, which can make it look less suspicious at first glance, but age alone does not make a sender legitimate, especially when the branding and the technical identity do not match.
The attacker is after your login details and any other account information you enter after clicking through. If you engage, you could hand over access to your PayPal account, expose payment information, or give the attacker enough detail to target your business with follow-up fraud.
If this lands in your inbox, do not click the button, do not reply, and do not enter any details. Go to PayPal directly through your usual saved link or app if you need to check your account, and report the message through your normal security channel.
The domain the message claims to be from. Fresh registrations and known-bad reputations are the strongest technical tells of a spoofed sender.
Practical steps you or your IT provider can take to reduce the risk from this kind of threat.
- Check: Inspect the real sender domain before you click, especially on messages claiming to be from payment providers like PayPal.
- Do not: Click account confirmation buttons or links in unexpected emails, even if the branding looks genuine.
- Verify: Open PayPal directly from your usual saved bookmark or app to check whether any action is actually required.
- Report: Send suspicious messages to your IT or security provider so blocking and mailbox checks can be carried out.
- Contact Decision1: If you believe your business has been targeted, contact the Decision1 team immediately.
See what a genuine PayPal message looks like, the real sender domain, the real link destination, and where to report a fake.