Debunking hoaxes and exposing scams since 2003!

Hoax-Slayer Logo

Phishing: 'Credit Card Expired' PayPal Email


PHISHING - 'Credit Card Expired' PayPal Email
Pin to share (Pic will Pin larger)

Brief Analysis

The email is not from PayPal. It is a phishing scam designed to trick you into sending your PayPal account login credentials and credit card details to online criminals.


Subject: Acoount Info Changes

Your CreditCard info changes in your PayPal account

Dear PayPal customer,

Your CreditCard has expired. Since it's the only payment method in your account, you'll need to update your card information to continue using PayPal. Please update your card's expiration date and card security code (CSC) as soon as possible. Update card details

You can always add a new card, too.


PayPal Credit Card Expired Scam Email

Detailed Analysis

'PayPal' Message Claims Credit Card Expired

According to this email, which claims to be from online payment service PayPal, your credit card has expired and you will therefore need to update card details to continue using PayPal.

The email instructs you to click a link to login and update your information.

Email is a Phishing Scam

However, the email is not from PayPal and the claim that you must follow a link and update your information is a lie. In fact, the email is an attempt by cybercrooks to get hold of both your PayPal login credentials and your credit card data.

If you were to click the link as instructed, you would be taken to a website that closely resembled the genuine PayPal website. Once on the fake site, you would be asked to login with your PayPal email address and password. After 'logging in', you would then be taken to an 'update' form that asks for credit card numbers and other personal information.

But, alas, all information provided on the fake site would be collected by scammers and used to hijack your account and perform fraudulent credit card transactions using your card.

PayPal Users Are Regularly Targeted

PayPal conducts almost all of its business online and regularly communicates with customers via email. Scammers therefore know that PayPal customers expect emails from the company and they have greatly exploited this expectation via continual email phishing campaigns.

PayPal has published information on its website explaining how to recognize phishing scam attempts and how to report any scam emails that come your way.

If you receive one of these messages, do not click any links or open any attachments that it contains.

PayPal 'Credit Card Expired' Phishing Scam


Last updated: July 4, 2014
First published: July 4, 2014
By Brett M. Christensen
About Hoax-Slayer

Phishing Scams - Anti-Phishing Information
PayPal - Watch Out For Phishing