PayPal logins are popular with fraudsters, which is why there are many phishing emails trying to get hold of customers' data.
The circulating email, which only appears to come from PayPal, is different in some respects than the previously known phishing attempts; the fraudsters have put a little more effort into this. You should be even more careful!
This is what the email looks like:

“Dear [Name] !
You have sent a payment for €179.99 EUR to Tunesstore (info@tunesstore.nl).
[…]
Would you like to change or cancel your order? then click here.”
[mk_ad]
What stands out about the email
- The sender seems (!) to be the existing Dutch Tunes Store… but why is a PayPal email from the store?
- The text of the email is completely in the form of a graphic in the email so that it is not recognized by spam filters
- The link in the graphic appears purple to make it appear that you have visited the link before
- The name and address is different than that of the recipient in order to further unsettle the recipient
- You can use a link to change or cancel the order... but you will never see this link in a PayPal email! You can't cancel orders with PayPal either, only payments! Orders can only be changed or canceled in an online store!
These are all points that make the email suspicious, but of course as a user you don't immediately pay attention to these details because you are too worried about the impending payment.
What happens when you click the link
Normally you are immediately taken to a fake PayPal login page, but here the fraudsters are more subtle:
you are first shown a payment that has supposedly been made, but which differs in all respects from the supposed payment in the email, before you log in log in to the fake site and enter all your details:

The fraudsters also installed a little trick when logging in:
the first login attempt is always displayed as incorrect. In this way, unsuspecting users enter their password twice, the fraudsters can be sure that they have a correct password.
But only almost , because even if you log in with fantasy data like “xtbrdtgh@gmx.com” and enter two different passwords, you have apparently logged in successfully!
Always pay attention to the URL – This is not PayPal!
The URL is the address of the website, which can be read at the top of the browser.
When you're on the real PayPal website, it ends at "paypal.com", but on the fake site it looks like this:

[mk_ad]
Conclusion
never click on the links contained in suspicious emails If in doubt, it is better to log in directly to the relevant page to check whether an unlawful payment has been made.
Also interesting:
If you enjoyed this post and value the importance of well-founded information, become part of the exclusive Mimikama Club! Support our work and help us promote awareness and combat misinformation. As a club member you receive:
📬 Special Weekly Newsletter: Get exclusive content straight to your inbox.
🎥 Exclusive video* “Fact Checker Basic Course”: Learn from Andre Wolf how to recognize and combat misinformation.
📅 Early access to in-depth articles and fact checks: always be one step ahead.
📄 Bonus articles, just for you: Discover content you won't find anywhere else.
📝 Participation in webinars and workshops : Join us live or watch the recordings.
✔️ Quality exchange: Discuss safely in our comment function without trolls and bots.
Join us and become part of a community that stands for truth and clarity. Together we can make the world a little better!
* In this special course, Andre Wolf will teach you how to recognize and effectively combat misinformation. After completing the video, you have the opportunity to join our research team and actively participate in the education - an opportunity that is exclusively reserved for our club members!
Notes:
1) This content reflects the current state of affairs at the time of publication. The reproduction of individual images, screenshots, embeds or video sequences serves to discuss the topic. 2) Individual contributions were created through the use of machine assistance and were carefully checked by the Mimikama editorial team before publication. ( Reason )

