Back to PayPal Invoice Refund Scam

This is a version of PayPal Invoice Refund Scam.

Fake 'Snapshot about registration ticket'

The victim receives an email that looks like a PayPal receipt, but the “receipt” is attached as a PDF. The PDF says $399.99 was auto-debited for a Bitcoin (BTC) purchase and tells the reader to call +1 (856) 206-5711 within 12 hours to cancel. This is a refund/invoice scam. If you call, scammers pose as “PayPal support” and try to steal your personal or banking details or trick you into sending money for a fake “refund.”

Fake 'Snapshot about registration ticket' | Primary Image

What’s different in this version

These traits set this message apart from the usual pattern.

  1. Attached as a PDF file that copies PayPal’s logo and layout.

  2. Claims a Bitcoin purchase of 0.030 BTC totaling $399.99 USD with “Auto debit from your bank account.”

  3. Pushes one callback number repeatedly +1 (856) 206-5711.

  4. Time pressure says the order can be canceled or modified within 12 hours.

  5. Awkward grammar (“Kindly check the order details helps,” “reach out our support”).

  6. Includes fake details to look real Date 2025-09-15, Transaction ID LZHYJE67380V, Customer ID 2854V9O4Q3.

  7. Sent from a generic Gmail address instead of a real paypal.com address.

  8. Subject line looks messy/forwarded “Snapshot about registration ticket …” not a normal PayPal receipt.

How this scam works

  1. 1

    You receive a fake invoice email 'from PayPal' for a product you never bought, featuring a prominent support number.

  2. 2

    When you call, the scammer claims they can fix it but needs remote access to your computer 'for verification'.

  3. 3

    They ask you to log into your bank, then black out your screen and use developer tools to fake a large refund.

  4. 4

    They pressure you to 'return' the overpayment via gift cards, crypto, or wire. The refund never happened.

✓ Do this

  • Close the email and log in to PayPal directly (don’t use links in the message).
  • Verify invoices inside your PayPal account only.
  • Report the email to abuse@paypal.com.

✗ Avoid this

  • Don’t call numbers in unsolicited emails.
  • Don’t install remote-access tools for strangers.
  • Don’t send money, gift cards, or crypto to 'return' funds.

Screenshots & Examples