Fake Invoice Scam

Scams Refund Scam
1

Email with fake invoice: October 11, 2025, 11:14AM

SUBJECT: Your Order is on the Way Soon

INVOICE HOTLINK:

https://apis.mail.yahoo.com/ws/v3/mailboxes/@.id==VjN-mdfY8OaB2-MMUO7vIAKFPvy8rfCKlIyr5H51P8DkfOOjgN_5gFUCsdBMhuwblZ88UWhjIv2uHVC2R0Wv8Q9VgQ/messages/@.id==ACg-PLieWVJ87cOTCFzhkdrWxlI/content/parts/@.id==2/refresh?appid=YMailNodin&ymreqid=a442ce61-2213-3299-1c57-88000001c900

HEADERS:

Received: from 10.217.150.202
by atlas314.free.mail.ne1.yahoo.com pod-id NONE with HTTPS; Tue, 7 Oct 2025 15:14:16 +0000
Return-Path: [email protected]
X-Originating-Ip: [209.85.222.49]
Received-SPF: pass (domain of gmail.com designates 209.85.222.49 as permitted sender)
Authentication-Results: atlas314.free.mail.ne1.yahoo.com;
dkim=pass [email protected] header.s=20230601 arc_overridden_status=NOT_OVERRIDDEN;
spf=pass smtp.mailfrom=gmail.com arc_overridden_status=NOT_OVERRIDDEN;
dmarc=pass(p=NONE,sp=QUARANTINE) header.from=gmail.com arc_overridden_status=NOT_OVERRIDDEN;