Fake PayPal security alerts want to trick you into confirming your account details

Scammers are sending fake PayPal security notifications to trick you into revealing your account access numbers and passwords. These emails often claim that your account has been suspended or requires urgent verification to ensure your details are accurate and up to date.

This activity was flagged due to its realistic impersonation of legitimate PayPal automated alerts and the high volume of similar lures reported across the New Zealand business community. The coordinated nature of these messages indicates an active credential harvesting campaign.

The technical details contain a significant contradiction: while the email layout and branding are high-fidelity, the actual sending domain is unrelated to official PayPal infrastructure. Legitimate security alerts from global financial providers always originate from verified, established company domains.

The surprising detail is the level of visual accuracy in the lure, including the use of official logos and the "Confirm Account" button that leads to a deceptive replica of the official login page. This attention to detail is specifically designed to bypass standard security suspicions during a routine workday.