PayPal user beware - experts warn subscriptions being abused to send fake purchase emails

• Scammers are abusing PayPal’s Subscriptions feature to inject phishing messages into legitimate PayPal emails
• A manipulated customer‑service URL and a forwarding Google Workspace list spread the fake notices widely
• PayPal says it’s mitigating the issue and urges users to treat unexpected subscription emails with caution

Scammers are using PayPal’s “Subscriptions” feature to send convincing phishing emails and trick users into giving away access to their accounts on the platform.

Subscriptions is a feature that lets businesses charge customers automatically on a regular schedule. Customers sign up once and agree to recurring payments, which PayPal then processes automatically.

If the business terminates someone’s subscription, that person is notified via email that comes directly from PayPal’s servers and, as such, passes most email security scans.