**Scam Campaign Report: PayPal Phishing Operation Using Connected Phone Numbers** This cybersecurity investigation has identified a coordinated scam campaign utilizing two connected phone numbers to execute PayPal phishing attacks targeting consumers across multiple states. The operation centers around phone numbers 888-221-1161 and 800-909-8635, which have been reported together with a confidence level of 0.50, indicating shared usage in the same fraudulent scheme. Phone number 888-221-1161 ha...
888-221-1161
Last reported Jun 7, 2026
- 14 FTC complaints filed against this number
- 2 FCC robocall/robotext complaints
- 6 community reports from users
Campaign Intelligence
This phone number cluster involves 2 numbers linked to Other complaints primarily targeting consumers in Fairfax, Virginia, Gary, Texas, Toledo, OH. The numbers are 888-221-1161, 888-338-0640. Together, these numbers have accumulated 16 consumer complaints across FTC and FCC databases. Per-number activity, 888-221-1161 with 16 complaints. The connected infrastructure includes 1 domains (phelp.online). Across all linked entities, consumers have filed 16 complaints with federal agencies. This ...
Details
Where These Reports Came From
States where people filed Better Business Bureau reports about this number. This shows where the people who were targeted live, not where the call comes from.
Connected Entities
Related Phone Numbers
Related Domains
Community Reports
Purchases compression online and checked where it was shipping from, the company to make sure it was not China. However, it turns out these Chinese scammers are using address in the US to sell goods. They charged my Visa credit card more than the receipt that was emailed from [email protected] . Then they try to make it look like you did a PayPal charge. These Chinese foreigner scammers are getting things mixed up. See below copy/paste from email receipt. Though I received cheap vacuum bags they did not include the mini vacuum device that was supposed to go with it. I told them I wanted to return it, then they said it would cost me more money to ship it back to China. They will not let me return them. Description Unit price Qty Amount Cordless Travel Vacuum Bag Set $34.99 USD 1 $34.99 USD Shipping and handling $7.99 USD Sales Tax $13.42 USD Discount -$0.00 USD Total $58.15 USD Payment $58.15 USD This transaction will appear on your statement as PAYPAL *PHOENIXSHOP PHO Transaction Summary Total amount of this Transaction: $58.15 USD Payment method: VISA x- 9883 Payment to recipient $58.15 USD Amount you'll pay $58.15 USD PayPal Help & Contact | Security | Apps Twitter Instagram Facebook LinkedIn PayPal is committed to preventing fraudulent emails. Emails from PayPal will always contain your full name. Learn to identify phishing Please don't reply to this email. To get in touch with us, click Help & Contact. PayPal Customer Service can be reached at 888-221-1161. Not sure why you received this email? Learn more Copyright © 1999-2026 PayPal, Inc. All rights reserved. PayPal is located at 2211 N. First St., San Jose, CA 95131. PayPal RT000403:en_US(en-US):1.0.1:9d2be18ccfbff [BBB Scam Type: Online Purchase] [Business: Gehers Hotys] [Location: Gordonsville, VA, USA - 22942]
email title: Your account processed a payout with a small deposit confirmation, and a $980 activation fee will be charged. If this is unauthorized, contact us at +1 (800) 909-8635 email sender: [email protected] body of email:Hello, Jessica Bryant PayPal michael sullivan sent you $0.01 USD Money received $0.01 USD Transaction ID 8A115021SA906052S Transaction date April 1, 2026 Smart money tip Now use your balance in stores with PayPal Debit. Plus earn 5% cash back in a monthly category you choose. Go to PayPal PayPal Help & Contact | Security | Apps Twitter Instagram Facebook LinkedIn The PayPal Debit Mastercard® is issued by The Bancorp Bank, N.A. (“Bancorp”) pursuant to a license by Mastercard International Incorporated and may be used everywhere Mastercard is accepted. Mastercard and the circles design are registered trademarks of Mastercard International Incorporated. Bancorp is issuer of the Card only and not responsible for the associated accounts or other products, services, or offers from PayPal. PayPal is a financial technology company, not a bank. The Card is linked to your PayPal Balance Account. See PayPal Balance Terms and Conditions. PayPal is committed to preventing fraudulent emails. Emails from PayPal will always contain your full name. Learn to identify phishing Please don't reply to this email. To get in touch with us, click Help & Contact. PayPal Customer Service can be reached at 888-221-1161. Not sure why you received this email? Learn more Copyright © 1999-2026 PayPal, Inc. All rights reserved. PayPal is located at 2211 N. First St., San Jose, CA 95131. PayPal RT003023:en_US(en-US):1.1.0:13655b37eb706 [BBB Scam Type: Phishing] [Business: PayPal / impostor / Debit Mastercard] [Location: WA, USA - 98125]
NAME- Here's your receipt. PayPal Thanks for paying with PayPal To see the payment details, log in to your PayPal account. Payment from NAME Payment to BallFly CO.LTD [email protected] Note to payment recipient You haven't included a note. Transaction ID 3PN510740B0723005 Date December 20, 2025 Payment Status COMPLETED Ship to NAME ADDRESS Description Unit price Qty Amount Women's Retro Christmas Casual Collared Top $33.99 USD 1 $33.99 USD Women's casual retro Christmas plaid corduroy shirt $38.99 USD 1 $38.99 USD Women'S White Christmas Print Casual Sweatshirt $24.99 USD 1 $24.99 USD Women's Merry Christmas Casual Knitted Sweater $34.90 USD 1 $34.90 USD Shipping and handling $0.00 USD Sales Tax $23.39 USD Discount -$15.94 USD Total $156.26 USD Payment $140.32 USD Transaction Summary Total amount of this Transaction: $140.32 USD Payment method: Payment to recipient $140.32 USD Amount you'll pay $140.32 USD PayPal Help & Contact | Security | Apps Twitter Instagram Facebook LinkedIn PayPal is committed to preventing fraudulent emails. Emails from PayPal will always contain your full name. Learn to identify phishing Please don't reply to this email. To get in touch with us, click Help & Contact. PayPal Customer Service can be reached at 888-221-1161. Not sure why you received this email? Learn more Copyright © 1999-2025 PayPal, Inc. All rights reserved. PayPal is located at 2211 N. First St., San Jose, CA 95131. PayPal RT000403:en_US(en-US):1.0.1:b4154f986a17c [BBB Scam Type: Online Purchase] [Business: Hollyjollyboutique.com] [Location: NY, USA- 13316]
Urgent: Steps Needed for Your Recent Payment Inbox Inbox PayPal To: me · Wed, Mar 11 at 10:21 AM Visit site Message Body Hello, Spencer Marcus PayPal RLTY RUE sent you $0.02 USD Get instant access today in PayPal for free or transfer to a bank. Accept Money Money received $0.02 USD Transaction ID 67383715DJ1883309 Transaction date March 11, 2026 Note from RLTY RUE You received this email because your PayPal account processed a payout by small deposit confirmation. If you authorized it, no action is needed. If not, please contact PayPal Customer Care at +1 (888) 338-0640 immediately to secure your account and request a refund. GOODS PayPal Help & Contact | Security | Apps Twitter Instagram Facebook LinkedIn PayPal is committed to preventing fraudulent emails. Emails from PayPal will always contain your full name. Learn to identify phishing Please don't reply to this email. To get in touch with us, click Help & Contact. PayPal Customer Service can be reached at 888-221-1161. Not sure why you received this email? Learn more Copyright © 1999-2026 PayPal, Inc. All rights reserved. PayPal is located at 2211 N. First St., San Jose, CA 95131. PayPal RT003023:en_US(en-US):1.0.0:96a07d474a34f [BBB Scam Type: Fake Invoice/Supplier Bill] [Business: RLTY RUE] [Location: VA, USA- 23185]
My Paypal account received a $0.03 refund from Rocket Clothing Inc. with the email listed as [email protected] . PayPal Rocket Clothing Inc sent you $0.03 USD Get instant access today in PayPal for free or transfer to a bank. Accept Money Money received $0.03 USD Transaction ID (Transaction ID number was here but I deleted in case of PII) Transaction date March 9, 2026 Note from Rocket Clothing Inc You received this email because your PayPal account processed a payout by small deposit confirmation. If you authorized it, no action is needed. If not, please contact PayPal Customer Care at +1 (888) 338-0640 immediately to secure your account and request a refund. GOODS PayPal Help & Contact | Security | Apps Twitter Instagram Facebook LinkedIn PayPal is committed to preventing fraudulent emails. Emails from PayPal will always contain your full name. Learn to identify phishing Please don't reply to this email. To get in touch with us, click Help & Contact. PayPal Customer Service can be reached at 888-221-1161. Not sure why you received this email? Learn more Copyright © 1999-2026 PayPal, Inc. All rights reserved. PayPal is located at 2211 N. First St., San Jose, CA 95131. PayPal RT003023:en_US(en-US):1.0.0:3545f2d0b8b62 Transaction date March 9, 2026 Note from Rocket Clothing Inc You received this email because your PayPal account processed a payout by small deposit confirmation. If you authorized it, no action is needed. If not, please contact PayPal Customer Care at +1 (888) 338-0640 immediately to secure your account and request a refund. GOODS PayPal Help & Contact | Security | Apps Twitter Instagram Facebook LinkedIn PayPal is committed to preventing fraudulent emails. Emails from PayPal will always contain your full name. Learn to identify p [BBB Scam Type: Online Purchase] [Business: Rocket Clothing Inc] [Location: VA, USA- 20189]
PayPal Phishing Scam Wanted to report a Phishing scam to let others know and see if there's anything else I need to do (I wasn't fully awake so I hope I didn't do anything that compromised me). I received an e-mail from PayPal saying that I had a request from someone for a large sum of money. The e-mail was legitimately from [PayPal.com](https://PayPal.com). I went to the website manually and checked my dashboard. It had the request. I clicked "Cancel" and it also said to call a phone number to report a fraudulent charge. This number is illegitimate and is 1-888-221-1161 (don't call). I called to report the charge. There was no annoying customer service robot (Red Flag 1). I explained the situation to the person. He then told me someone has access to my account. I explained that a charge hadn't happened, that someone had just requested money from me. I didn't get a straight answer (Red Flag 2). He then tried to get me to download some software that allows VPN remote access (Red Flag 3). I didn't download it or install it. He instead told me to go to a website: [phelp.online](https://phelp.online) \- don't go to it. I stupidly did, but didn't enter any information, immediately closed it, and hung up on him. I found a different phone number on the PayPal website, called them, and reported it. What I stupidly hadn't realized is that the phone number I originally called was written as a note by the requester, not an official PayPal comment \*facepalm\* Anyway, I didn't give out any information, download anything, or anything like that. But I did go to that stupid phelp website very briefly. I'm on a Mac, all of my software is up to date. I immediately changed all important passwords just to be safe. Is there anything else I should do?
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.