Starts with the standard phishing email that usually just leads to a phishing page. However, this one uses a legit payment processor and shady TOS to scam people.