PayPal scam (866) 760-2790 "$989.99"

Scams Refund Scam
1

Scam Number: (866) 760-2790
Scammer’s Website or Email: https://udcare.live/
Additional information about this scam: I received this today.

Public Message
Invoice for your order
Back to Inbox
To
mike
From
[email protected]
Sending IP
69.72.42.13
Received
2024-03-20 10:29:52

Invoice for your order

Hi
From Lidya Poetri all account transactions shared.
Dear Customer #3019948, Thank you for your order! Your account has been charged on Shopify LLC with USD 989.99 and the amount will reflect on your account activity within 24 hours. Transaction Details Vendor Name : Shopify Store. Item Name : iPhone 15 Pro Max (256GB) Invoice Number : TRNX91900291762 Invoice Date : 03/20/2024 Delivery Date : 03/25/2024 Payment Mode : Online If you do not authorize this payment or to cancel this transaction, please call our support at : +1 (866) 760-2790 Thank you for choosing us.

For all requests and suggestions, you can contact us [email protected]
Our support team always with you.

Have a nice day.
Team Workif

scam0320e
scam0320e1086×562 34.8 KB

2

RingCentral line, baiting with virtual machine.

3

866-760-2790 David Wednesday 3-20-24 1:43PM EST

4

HIGHLIGHTS FROM VIRTUAL MACHINE BAIT:

  • The scammer, “Mike Wilson,” will claim a hacker used your identity to purchase the iPhone, prompting you to “cancel” by “opening the Google Chrome” and throwing your computer out the window.
  • “Mike” then called back from his TextNow line, ‪(410) 989-9163‬, and had me go to udcare.live (Code: 32981, IP: 85.239.34.90 :moldova:), an iFrame of hmrc1.top (IP: 194.110.247.106 :moldova:)
  • My call was then transferred to “Mark,” who then asked me to open the email before blanking my screen with a fake software update and goign to https://paypalaccoun83.wixsite.com/paypal to fill out the “cancellation form.”
    image
    image1020×765 6.32 KB
  • After completing the form, I was then asked to log into my nonexistent bank account. Since I don’t do online banking, “Mike” asked me to enroll for an online account anyways, so I enrolled with the bhenchod song.