Skip to content
ZeroScam
ZeroScam
SCAM✉️ Email Subject✉️ EMAILHigh risk

"Invoice from [Seller]" Fake PayPal Invoice Email Scam

Scam email subject line

Invoice from Just World Books LLC (TRX-#7aa3884)

Known variants

You sent a payment of $399.99 to [fake seller]

Don't recognize this payment? Call [number]

Invoice #[number] from [company name]

PayPal: You've authorized a payment of $649.99

Money request from [name]

PayPal officially documents this scam: scammers open real PayPal accounts and send genuine-platform invoices with alarmist notes and callback numbers. The email appears to originate from PayPal's own servers — making it pass spam filters. FTC 2024 data shows PayPal was the 3rd most impersonated company.

Reports

FTC 2024: PayPal was 3rd most impersonated company; part of $12.5B fraud losses

First documented

2022

Last active

2026-03

⚠ Email subject lines can be spoofed or randomized. Scammers frequently vary subject lines to evade spam filters. This page documents a subject line pattern reported to official government agencies. It is not a factual determination about any specific sender. Contact [email protected] if you believe your organization is listed in error.

Who this email pretends to be from

PayPalPayPal Security TeamPayPal Customer Support

What this scam email says

You receive a real PayPal email (because the scammer sent an actual PayPal invoice from their account). The invoice is from a fake company ('Just World Books LLC', 'Mac Store', 'Crypto Exchange') for $300-$650. A note in the invoice says 'Don't recognize this seller? Call [phone number] immediately.' Calling connects to a fake PayPal agent who requests your account credentials or remote access.

What this scam email looks like

Email preview — reconstructed example
From: [email protected] [legitimate PayPal server]
Subject: Invoice from Just World Books LLC (TRX-#7aa3884)

[This email comes from PayPal's real servers — the scam is in the note below]

Just World Books LLC sent you an invoice for $399.99

Due date: immediately
Invoice note from seller:
"Did not authorize this purchase? CALL IMMEDIATELY to cancel: 1-888-XXX-XXXX
Failure to call within 12 hours will confirm the transaction."

[Pay Now] [View Invoice]

PayPal

Reconstructed example for educational purposes. Not a verbatim reproduction.

Scam email subject line variants

  • Invoice from Just World Books LLC (TRX-#7aa3884)
  • You sent a payment of $399.99 to [fake seller]
  • Don't recognize this payment? Call [number]
  • Invoice #[number] from [company name]
  • PayPal: You've authorized a payment of $649.99

5 red flags

1

PayPal: 'PayPal never includes phone numbers in invoices' — this is stated on their official security page

2

The email passes spam filters because it genuinely comes from PayPal's servers

3

FTC 2024: PayPal was the 3rd most impersonated company by scammers

4

No PayPal dispute requires calling a phone number — all disputes are at paypal.com/disputes

5

Callback number agent requests account credentials, card numbers, or remote access

What to do

Do not call the number in the invoice note

Log in at paypal.com directly — check your real transaction history

Report the invoice to PayPal at [email protected]

Block and report the sender via PayPal's platform

Report to FTC at reportfraud.ftc.gov

Report this email scam

Source

PayPal official security page — invoice callback scam documented; FTC impersonation rule 2025 — PayPal was third-most impersonated company (FTC 2024 data spotlight)

https://www.paypal.com/us/cshelp/article/what-are-common-scams-and-how-do-i-spot-them-help201

Fake sender domains used in this scam

Scammers impersonate legitimate brands using these fraudulent domains. If you received an email from one of these, it is a scam.

paypal-security-center.compaypal-billing-alert.netpaypal-dispute-center.compaypal-account-verify.compaypal-refund-portal.net

People also search for

Frequently asked questions

Is an email with subject "Invoice from Just World Books LLC (TRX-#7aa3884)" a scam?

PayPal officially documents this scam: scammers open real PayPal accounts and send genuine-platform invoices with alarmist notes and callback numbers. The email appears to originate from PayPal's own servers — making it pass spam filters. FTC 2024 data shows PayPal was the 3rd most impersonated company.

What does this scam email say?

You receive a real PayPal email (because the scammer sent an actual PayPal invoice from their account). The invoice is from a fake company ('Just World Books LLC', 'Mac Store', 'Crypto Exchange') for $300-$650. A note in the invoice says 'Don't recognize this seller? Call [phone number] immediately.…

What should I do if I received this email?

Do not call the number in the invoice note Log in at paypal.com directly — check your real transaction history Report the invoice to PayPal at [email protected]

Who does this email pretend to be from?

This scam impersonates: PayPal, PayPal Security Team, PayPal Customer Support. PayPal: 'PayPal never includes phone numbers in invoices' — this is stated on their official security page

Received a suspicious email?

Paste the email text or subject line — check it instantly, free.

Check your email →

Source: PayPal official security page — invoice callback scam documented; FTC impersonation rule 2025 — PayPal was third-most impersonated company (FTC 2024 data spotlight)

First documented: 2022 · Last active: 2026-03

← Scam message database