This cluster centers on 2764 connected domains tagged as BeaverTail, Kaiji, fbf543. 645 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 1132 phone numbers (7638857447, 8664372914, 2157987305) with 10266 FTC complaints; 146 companies (JPMORGAN CHASE & CO., Advanced Resolution Services Inc., EVERBANK, NATIONAL ASSOCIATION) with 8616274 CFPB complaints; 298 email addresses (xxxxxxxxxxxxxxxxxxxxxxxx@vm...
(888) 338-0640
Last reported Mar 23, 2026
- 10 community reports from users
Campaign Intelligence
This cluster centers on 3287 connected domains tagged as HijackLoader, RemcosRAT, screenconnect. 617 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 1649 phone numbers (5408463620, 8552597377, 8007873903) with 7110 FTC complaints; 143 companies (Informative LLC, HomePlus Corporation, Doral Capital Corporation) with 8547081 CFPB complaints; 807 email addresses (kellymoore_64@yahoo.com, schantzsybg7@...
**Multi-Vector Debt Relief Scam Campaign** This scam campaign operates through a network of 7 interconnected phone numbers and 3 companies, generating a total of 392 FTC complaints and 172 CFPB complaints. The operation primarily targets consumers with fraudulent debt relief services, using numbers 8559941953 (279 FTC complaints) and 6072949001 (97 FTC complaints) as the primary contact points. These numbers are linked through same-campaign relationships with confidence levels of 0.70, indicati...
Community members have submitted 3 distinct reports about 8883380640, describing experiences with suspicious calls. Here is what people are reporting: "Email from PayPal saying Rocket Clothing Inc made a deposit of $.03 in my PayPal account. Never heard of this company and it sounded suspicious. Note from Rocket Clothing Inc: quote You received this email because your PayPal account processed a payout by small deposit confirmation. If you author..." "They have sent $.04 to my Paypal which tri...
This cluster centers on 2874 connected domains tagged as QuasarRAT, StealitStealer, pw-k53mv9bc. 652 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 1375 phone numbers (2157987305, 2025069230, 2028641298) with 14635 FTC complaints; 160 companies (JPMORGAN CHASE & CO., Advanced Resolution Services Inc., EVERBANK, NATIONAL ASSOCIATION) with 8680419 CFPB complaints; 299 email addresses (abuse@fb.com, ...
This cluster centers on 1486 connected domains tagged as None, keylogger. 5 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 1364 phone numbers (3124141737, 3163966869, 8553892999) with 17909 FTC complaints; 170 companies (EQUIFAX, INC., TRANSUNION INTERMEDIATE HOLDINGS, INC., BANK OF AMERICA, NATIONAL ASSOCIATION) with 8747332 CFPB complaints; 187 email addresses (xxxxxxxxxxxxxxxxxxxxxxxx@vmh5.grup...
Details
Linked Company Activity
Connected Entities
Community Reports
Note from Rocket Clothing Inc: quote You received this email because your PayPal account processed a payout by small deposit confirmation. If you authorized it, no action is needed. If not, please contact PayPal Customer Care at +1 (888) 338-0640 immediately to secure your account and request a refund. It was for $.03, I’m not familiar with Rocket Clothing and suspected scam; searched the "customer service" # provided, finding it associated with various scams. [BBB Scam Type: Phishing] [Business: PayPal IMPOSTER] [Location: CA, USA- 95464]
Money received $0.02 USD Transaction ID ***************** Transaction date March 9, 2026 Note from Rocket Clothing Inc You received this email because your PayPal account processed a payout by small deposit confirmation. If you authorized it, no action is needed. If not, please contact PayPal Customer Care at +1 (888) 338-0640 immediately to secure your account and request a refund. GOODS [BBB Scam Type: Bank/Credit Card Company Imposter] [Business: Rocket Clothing Inc] [Location: NY, USA- 11411]
Sent $.03 to PayPal account with note: You received this email because your PayPal account processed a payout by small deposit confirmation. If you authorized it, no action is needed. If not, please contact PayPal Customer Care at +1 (888) 338-0640 immediately to secure your account and request a refund. [BBB Scam Type: Phishing] [Business: RLTY RUE] [Location: CA, USA- 90230]
Money received $0.02 USD Transaction ID 98A77699F72947945 Transaction date March 11, 2026 Note from RLTY RUE You received this email because your PayPal account processed a payout by small deposit confirmation. If you authorized it, no action is needed. If not, please contact PayPal Customer Care at +1 (888) 338-0640 immediately to secure your account and request a refund. [BBB Scam Type: Online Purchase] [Business: RLTY RUE] [Location: LA, USA- 70454]
Note from RLTY RUE You received this email because your PayPal account processed a payout by small deposit confirmation. If you authorized it, no action is needed. If not, please contact PayPal Customer Care at +1 (888) 338-0640 immediately to secure your account and request a refund. [BBB Scam Type: Other] [Business: PayPal IMPOSTER] [Location: FL, USA- 32819]
I received an email seemingly from PayPal that reported I’d recused a $.04 deposit from RLTY RUE. Email contents below. When I called the number, they said I was victim of identity theft. They asked me to open up a google browser on a laptop, not my phone, so they could give me a code to protect my account. When I expressed confusion, the woman insisted I needed to let he help me protect my bank account. When I was skeptical, she said, ok, you can check and call me back. Money received $0.04 USD Transaction ID (Omitted) Transaction date March 11, 2026 Note from RLTY RUE You received this email because your PayPal account processed a payout by small deposit confirmation. If you authorized it, no action is needed. If not, please contact PayPal Customer Care at +1 (888) 338-0640 immediately to secure your account and request a refund. GOODS @media (min-width:768px){.css-1w6dufj{-webkit-box-flex:0;-webkit-flex-grow:0;-ms-flex-positive:0;flex-grow:0;-webkit-flex-basis:auto;-ms-flex-preferred-size:auto;flex-basis:auto;width:c [BBB Scam Type: Phishing] [Business: Unknown] [Location: DC, USA- 20008]
Not sure if a scam but highly suspicious. Notification email from Paypal: "You received this email because your PayPal account processed a payout by small deposit confirmation. If you authorized it, no action is needed. If not, please contact PayPal Customer Care at +1(888) 338-0640 immediately to secure your account and request a refund". The email was legitimate from PayPal. The deposit was for $0.03. Not purchases were recently made using this PayPal account. The only hit I can find on RLTY RUE is for a traveling hair dresser. https://rltyrue.square.site/ (may not be affiliated). Will update if there is a false purchase on the account. This may be a scam testing account numbers. @media (min-width:768px){.css-1w6dufj{-webkit-box-flex:0;-webkit-flex-grow:0;-ms-flex-positive:0;flex-grow:0;-webkit-flex-basis:auto;-ms-flex-preferred-size:auto;flex-basis:auto;width:calc(100% * 6 / var(--Grid-parent-columns) - (var(--Grid-parent-columns) - 6) * (var(--Grid-parent-columnSpacing) / var(--Grid-parent-columns) [BBB Scam Type: Phishing] [Business: Paypal RLTY RUE] [Location: PA, USA- 16505]
They have sent $.04 to my Paypal which triggers an actual email from Paypal saying: " Money received $0.04 USD Transaction ID 2VX134844J974XXXXX Transaction date March 11, 2026 Note from RLTY RUE You received this email because your PayPal account processed a payout by small deposit confirmation. If you authorized it, no action is needed. If not, please contact PayPal Customer Care at +1 (888) 338-0640 immediately to secure your account and request a refund. GOODS" [BBB Scam Type: Fake Invoice/Supplier Bill] [Business: RLTY RUE] [Location: NY, USA- 10036]
Email from PayPal saying Rocket Clothing Inc made a deposit of $.03 in my PayPal account. Never heard of this company and it sounded suspicious. Note from Rocket Clothing Inc: quote You received this email because your PayPal account processed a payout by small deposit confirmation. If you authorized it, no action is needed. If not, please contact PayPal Customer Care at +1 (888) 338-0640 immediately to secure your account and request a refund. It was for $.03, I’m not familiar with Rocket Clothing and suspected scam; searched the "customer service" # provided, finding it associated with various scams. [BBB Scam Type: Retail Business Business name Rocket Clothing Inc] [Business: Rocket Clothing Inc] [Location: NY, USA- 14850]
You received this email because your PayPal account processed a payout by small deposit confirmation. If you authorized it, no action is needed. If not, please call PayPal customer care at +1 (888) 338-0640 immediately to secure your account and request a refund. Dollars Lost $0.04 [BBB Scam Type: Phishing] [Business: Gentry Zakery] [Location: CA, USA- 95158]
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.
NordProtect — Identity theft monitoring and recovery
NordProtect watches for your personal info on the dark web, monitors your credit, and covers up to $1M in identity theft insurance.