TLDR
A live phantom invoice / refund scam is impersonating PayPal, Amazon, and Geek Squad with fake receipts for charges (e.g. $349, $499, $598) that never happened. The email's only goal is to scare you into calling a bogus "support" number,...
Como funciona
A live phantom invoice / refund scam is impersonating PayPal, Amazon, and Geek Squad with fake receipts for charges (e.g. $349, $499, $598) that never happened. The email's only goal is to scare you into calling a bogus "support" number,...
Señales de alerta
- An unexpected invoice or renewal notice for a charge you don't recognize, with a callback number to "cancel" it. Urgent, fear based language pushing you to act fast without verifying directly with the vendor. No real attachment or link to analyze, which is exactly why the message often bypasses spam filters
Qué hacer
- 1Do not call the number in the email. Log in directly to the official PayPal/Amazon/etc. site (or open the real app) to check any charge. If you already called and followed instructions: run a full antivirus scan, change critical passwords, enable multi factor authentication (MFA), and contact your bank to monitor or block your card. Report the message as phishing, then delete it
- 2real companies never resolve disputes through unsolicited phone
Fuente
malwarebytes
Fuente verificada por Mythos Forensic Team
https://www.malwarebytes.com/blog/threat-intel/2026/06/we-found-this-fake-invoice-campaign-while-scammers-were-still-building-itFAQ
Es Phantom invoice scam caught mid rollout: PayPal, Amazon and Geek Squad impersonations push victims to call scammer phone numbers una estafa real?
Si. Trata el mensaje, la llamada o la solicitud de pago como sospechosos hasta que los verifiques por un canal oficial.
Cuales son las primeras senales?
An unexpected invoice or renewal notice for a charge you don't recognize, with a callback number to "cancel" it. Urgent, fear based language pushing you to act fast without verifying directly with the vendor. No real attachment or link to analyze, which is exactly why the message often bypasses spam filters
Que debo hacer primero?
Do not call the number in the email. Log in directly to the official PayPal/Amazon/etc. site (or open the real app) to check any charge. If you already called and followed instructions: run a full antivirus scan, change critical passwords, enable multi factor authentication (MFA), and contact your bank to monitor or block your card. Report the message as phishing, then delete it; real companies never resolve disputes through unsolicited phone
Puede LegalAudit revisar mi caso?
Si. Abre el chat gratis y pega el mensaje, el enlace, el remitente o los datos de pago para un triage.