Scam Detective
Phone Number

(888) 221-1161

Last reported Mar 23, 2026

Suspicious
  • 10 FTC complaints filed against this number
  • 2 FCC robocall/robotext complaints
  • 4 community reports from users

Campaign Intelligence

This cluster centers on 2382 connected domains tagged as PureHVNC, elf, sh. 572 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 969 phone numbers (8772427372, 1319641540, 1319641221) with 557 FTC complaints; 690 email addresses (kellymoore_64@yahoo.com, schantzsybg7@aol.com, online.motors@consultant.com). Across all linked entities, consumers have filed 2228 complaints with federal agencies. Geog...

This cluster centers on 2396 connected domains tagged as 156-233-71-230, Quakbot, lnk. 586 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 969 phone numbers (8772427372, 1319641540, 1319641221) with 565 FTC complaints; 690 email addresses (kellymoore_64@yahoo.com, schantzsybg7@aol.com, online.motors@consultant.com). Across all linked entities, consumers have filed 2237 complaints with federal agen...

This cluster centers on 1895 connected domains tagged as BeaverTail, RedLineStealer, password: 2026. 113 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 934 phone numbers (8772427372, 1319641540, 1319641221) with 524 FTC complaints; 683 email addresses (kellymoore_64@yahoo.com, schantzsybg7@aol.com, online.motors@consultant.com). Across all linked entities, consumers have filed 2093 complaints wit...

This cluster centers on 2416 connected domains tagged as BABADEDA, WallStealer, meterpreter. 607 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 969 phone numbers (5086371451, 9366439335, 1842506726) with 570 FTC complaints; 690 email addresses (kellymoore_64@yahoo.com, schantzsybg7@aol.com, online.motors@consultant.com). Across all linked entities, consumers have filed 2243 complaints with federa...

This cluster centers on 2764 connected domains tagged as BeaverTail, Kaiji, fbf543. 645 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 1132 phone numbers (7638857447, 8664372914, 2157987305) with 10266 FTC complaints; 146 companies (JPMORGAN CHASE & CO., Advanced Resolution Services Inc., EVERBANK, NATIONAL ASSOCIATION) with 8616274 CFPB complaints; 298 email addresses (xxxxxxxxxxxxxxxxxxxxxxxx@vm...

This cluster centers on 3287 connected domains tagged as HijackLoader, RemcosRAT, screenconnect. 617 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 1649 phone numbers (5408463620, 8552597377, 8007873903) with 7110 FTC complaints; 143 companies (Informative LLC, HomePlus Corporation, Doral Capital Corporation) with 8547081 CFPB complaints; 807 email addresses (kellymoore_64@yahoo.com, schantzsybg7@...

This cluster centers on 2874 connected domains tagged as QuasarRAT, StealitStealer, pw-k53mv9bc. 652 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 1375 phone numbers (2157987305, 2025069230, 2028641298) with 14635 FTC complaints; 160 companies (JPMORGAN CHASE & CO., Advanced Resolution Services Inc., EVERBANK, NATIONAL ASSOCIATION) with 8680419 CFPB complaints; 299 email addresses (abuse@fb.com, ...

Details

FTC Complaints
10
FCC Complaints
2
FCC Call Types
Live Voice (1), Text Message (1)
Category
Other
First Seen
2/22/2026
Last Reported
3/23/2026
Area Code
888

Linked Company Activity

ACCESS GROUP INC.
335 BBB complaints
ACCOUNT SERVICES INC.
2328 BBB complaints

Connected Entities

Community Reports

Urgent: Steps Needed for Your Recent Payment Inbox Inbox PayPal To: me · Wed, Mar 11 at 10:21 AM Visit site Message Body Hello, Spencer Marcus PayPal RLTY RUE sent you $0.02 USD Get instant access today in PayPal for free or transfer to a bank. Accept Money Money received $0.02 USD Transaction ID 67383715DJ1883309 Transaction date March 11, 2026 Note from RLTY RUE You received this email because your PayPal account processed a payout by small deposit confirmation. If you authorized it, no action is needed. If not, please contact PayPal Customer Care at +1 (888) 338-0640 immediately to secure your account and request a refund. GOODS PayPal Help & Contact | Security | Apps Twitter Instagram Facebook LinkedIn PayPal is committed to preventing fraudulent emails. Emails from PayPal will always contain your full name. Learn to identify phishing Please don't reply to this email. To get in touch with us, click Help & Contact. PayPal Customer Service can be reached at 888-221-1161. Not sure why you received this email? Learn more Copyright © 1999-2026 PayPal, Inc. All rights reserved. PayPal is located at 2211 N. First St., San Jose, CA 95131. PayPal RT003023:en_US(en-US):1.0.0:96a07d474a34f .css-1w6dufj{-webkit-box-flex:0;-webkit-flex-grow:0;-ms-flex-positive:0;flex-grow:0;-webkit-flex-basis:auto;-ms-flex-preferred-size:auto;flex-basis:auto;width:c [BBB Scam Type: Fake Invoice/Supplier Bill] [Business: RLTY RUE] [Location: VA, USA- 23185]

4 days ago

My Paypal account received a $0.03 refund from Rocket Clothing Inc. with the email listed as [email protected] . PayPal Rocket Clothing Inc sent you $0.03 USD Get instant access today in PayPal for free or transfer to a bank. Accept Money Money received $0.03 USD Transaction ID (Transaction ID number was here but I deleted in case of PII) Transaction date March 9, 2026 Note from Rocket Clothing Inc You received this email because your PayPal account processed a payout by small deposit confirmation. If you authorized it, no action is needed. If not, please contact PayPal Customer Care at +1 (888) 338-0640 immediately to secure your account and request a refund. GOODS PayPal Help & Contact | Security | Apps Twitter Instagram Facebook LinkedIn PayPal is committed to preventing fraudulent emails. Emails from PayPal will always contain your full name. Learn to identify phishing Please don't reply to this email. To get in touch with us, click Help & Contact. PayPal Customer Service can be reached at 888-221-1161. Not sure why you received this email? Learn more Copyright © 1999-2026 PayPal, Inc. All rights reserved. PayPal is located at 2211 N. First St., San Jose, CA 95131. PayPal RT003023:en_US(en-US):1.0.0:3545f2d0b8b62 Transaction date March 9, 2026 Note from Rocket Clothing Inc You received this email because your PayPal account processed a payout by small deposit confirmation. If you authorized it, no action is needed. If not, please contact PayPal Customer Care at +1 (888) 338-0640 immediately to secure your account and request a refund. GOODS PayPal Help & Contact | Security | Apps Twitter Instagram Facebook LinkedIn PayPal is committed to preventing fraudulent emails. Emails from PayPal will always contain your full name. Learn to identify p [BBB Scam Type: Online Purchase] [Business: Rocket Clothing Inc] [Location: VA, USA- 20189]

4 days ago

PayPal Phishing Scam Wanted to report a Phishing scam to let others know and see if there's anything else I need to do (I wasn't fully awake so I hope I didn't do anything that compromised me). I received an e-mail from PayPal saying that I had a request from someone for a large sum of money. The e-mail was legitimately from [PayPal.com](https://PayPal.com). I went to the website manually and checked my dashboard. It had the request. I clicked "Cancel" and it also said to call a phone number to report a fraudulent charge. This number is illegitimate and is 1-888-221-1161 (don't call). I called to report the charge. There was no annoying customer service robot (Red Flag 1). I explained the situation to the person. He then told me someone has access to my account. I explained that a charge hadn't happened, that someone had just requested money from me. I didn't get a straight answer (Red Flag 2). He then tried to get me to download some software that allows VPN remote access (Red Flag 3). I didn't download it or install it. He instead told me to go to a website: [phelp.online](https://phelp.online) \- don't go to it. I stupidly did, but didn't enter any information, immediately closed it, and hung up on him. I found a different phone number on the PayPal website, called them, and reported it. What I stupidly hadn't realized is that the phone number I originally called was written as a note by the requester, not an official PayPal comment \*facepalm\* Anyway, I didn't give out any information, download anything, or anything like that. But I did go to that stupid phelp website very briefly. I'm on a Mac, all of my software is up to date. I immediately changed all important passwords just to be safe. Is there anything else I should do?

1158 days ago3 upvotes

PayPal Phishing Scam Wanted to report a Phishing scam to let others know and see if there's anything else I need to do (I wasn't fully awake so I hope I didn't do anything that compromised me). I received an e-mail from PayPal saying that I had a request from someone for a large sum of money. The e-mail was legitimately from [PayPal.com](https://PayPal.com). I went to the website manually and checked my dashboard. It had the request. I clicked "Cancel" and it also said to call a phone number to report a fraudulent charge. This number is illegitimate and is 1-888-221-1161 (don't call). I called to report the charge. There was no annoying customer service robot (Red Flag 1). I explained the situation to the person. He then told me someone has access to my account. I explained that a charge hadn't happened, that someone had just requested money from me. I didn't get a straight answer (Red Flag 2). He then tried to get me to download some software that allows VPN remote access (Red Flag 3). I didn't download it or install it. He instead told me to go to a website: [phelp.online](https://phelp.online) \- don't go to it. I stupidly did, but didn't enter any information, immediately closed it, and hung up on him. I found a different phone number on the PayPal website, called them, and reported it. What I stupidly hadn't realized is that the phone number I originally called was written as a note by the requester, not an official PayPal comment \*facepalm\* Anyway, I didn't give out any information, download anything, or anything like that. But I did go to that stupid phelp website very briefly. I'm on a Mac, all of my software is up to date. I immediately changed all important passwords just to be safe. Is there anything else I should do?

1158 days ago3 upvotes

Share Your Experience

What's Your Exposure?

Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.

NordVPN Block threats and hide your IP from trackers

NordVPN encrypts your internet traffic and blocks malicious websites, ads, and trackers before they reach your device.