Scammer is sending PayPal invoices for domain renewals.
Fake domain name renewal emails are nothing new, but some aspects of one making the rounds are.
A Domain Name Wire reader received a fake renewal notice today. Instead of being sent from the scammer, the person sent it as a PayPal invoice. Here’s what it looks like:
A message on the invoice states:
The paid registration period of the domain [domain] expired. It is necessary to pay for the prolongation of domain name within a day from the date of having notice. We would like to inform you that if payment is not made within the specified time frame, domain delegation will be terminated. The domain will be deleted from the registry and can be accessible for registration to other customers.
The link goes directly to PayPal to make the payment, and the invoice includes the GoDaddy logo:
Anyone can upload the logo of their choice when sending PayPal invoices. They’re supposed to use their own logo, though.
Clearly, the scammer is harvesting Whois to send these invoices.
The good news is that PayPal offers buyer protection, even for intangible goods. I suspect PayPal will be on to this quickly as it has systems in place to prevent scams.