Hacker in black hood with laptop stealing private personal data, user login, account password or documents in internet. Fraud, hacking or phishing cybercrime flat concept. Theft or attack in network.
SHARE
Venmo, the popular peer-to-peer payment app owned by PayPal, has become an increasingly common target for scammers. One scam that has been making the rounds involves fraudulent text messages and emails pretending to be from Venmo regarding suspicious charges to something called “Paxful Wallet.” While it may seem innocuous at first glance, this scam has the potential to inflict significant financial and personal data loss on victims.
This scam typically starts with victims receiving a text message or email pretending to come from Venmo. The message has official Venmo branding and colors to appear legitimate and will claim there was an unauthorized or suspicious charge made to the recipient’s Venmo account.
The charge amount is usually $99.99 and the merchant is listed under various names such as “Paxful Wallet,” “Pac Wallet,” or some other fabricated service meant to sound credible. The message then provides a customer support phone number or link and instructs victims to call if they did not authorize the charge.
For example, an sample text people have reported receiving states:
“Venmo: Paxful Wallet requests $99.99. You paid $99.99 to Paxful using Venmo. If not authorized by you, call 888-555-5678.“
The email version uses the Venmo logo and colors to appear official with a subject line like “Action Needed: Review recent Venmo payment of $99.99.” The body then lists the fake charge details and says to call or click a link regarding unauthorized activity.
However, the phone number, clickable links, and sender contact details provided do not actually belong to Venmo or its parent company PayPal. Instead, they are spoofed and controlled entirely by scammers running a fraudulent operation to steal personal information and money.
When victims call the number or click the link, the scammers on the other end pose as Venmo “support agents” in order to phish for login credentials, bank info, or remote access to devices. They can then directly steal Venmo balances or launch wider identity theft and cyber attacks.
By pretending to be Venmo and creating a sense of urgency around unauthorized account charges, the scammers play off fears over account security breaches to trick recipients into calling what they believe is Venmo’s support team. This allows them to initiate various tactics to financially exploit and steal private data from unwitting victims.
How the Scam Unfolds
Here is a step-by-step breakdown of how the “Paxful Wallet” Venmo scam typically operates once the initial contact has been made:
Step 1: The Initial Venmo Fraud Alert
The scam starts with an unsolicited text or email sent out en masse from the scammer. The message is made to look like it comes directly from Venmo, often including official branding and logo.
The subject and body say there has been a suspicious $99.99 charge to “Paxful Wallet” on the recipient’s Venmo account. It provides a “Venmo support” phone number to call if the charge is unauthorized.
Step 2: Call Connects to Fake Venmo Support
When the worried recipient calls the number provided, the phone is answered by a scammer pretending to work in Venmo customer support. They confirm the caller’s phone number or email to “pull up their account.”
Step 3: Scammer Gains Remote Access
Once they have established a sense of legitimacy in the eyes of the victim, the fake support rep claims unauthorized users have gained access to the victim’s Venmo account. They say remote access to the victim’s device is needed to stop additional fraudulent charges.
The scammer may try to drive up fear and urgency by claiming the attacker is actively using Venmo to steal money. They’ll insist the only way to secure the account is by remotely connecting to the device right away.
Once given permission for remote access, the scammer can use software tools to mirror or control the victim’s device without their knowledge.
Step 4: Login Credentials and Financial Data Stolen
With control over the victim’s device, the scammer can now secretly install malware or spyware without consent to harvest login credentials, financial information, personal data, and more over an extended period.
They may also immediately access Venmo, banking, and other sensitive apps on the device to steal balances, make fraudulent transactions, or change account passwords to lock out the victim.
Step 5: Ransomware Attack or Blackmail
In some cases, the scammer’s end goal may be deploying ransomware that encrypts files on the victim’s device and denies access until an extortion payment is made.
Scammers could also threaten to publicly release or delete stolen personal data from the device if a blackmail payment isn’t made.
By this stage, significant financial loss and security compromises have likely already occurred without the victim’s knowledge. Severe long-term damage can result.
How to Spot This Venmo Scam
With scammers constantly evolving their tactics, it can be hard for consumers to discern legitimate Venmo communications from fraudulent phishing attempts aiming to steal personal data. However, there are key signs you can watch out for to avoid falling victim to the “Paxful Wallet” Venmo text message or email scam.
Analyze the Sender Details
Take a close look at the details of the sender in any Venmo alert message. Scammers often spoof legitimate business names, logos, and sender addresses in email and SMS scams. But upon closer scrutiny, formatting discrepancies, misspellings, strange emails or phone numbers, and other anomalies may reveal the message’s fraudulent nature.
Verify the sender name, email address, phone number, and other identifiers against official Venmo contacts before trusting the contents of the message.
Watch For Suspicious Links and Attachments
In addition to sender details, analyze any links or attachments included in Venmo alerts purporting unauthorized charges. Scammers frequently include malicious links to phishing sites designed to steal login information. Hover over links to preview destinations before clicking.
Be especially wary of .exe attachments that can install malware. Venmo states they will never send emails with attachments. Delete these suspicious files unopened.
Confirm Charge Details
Rather than calling the number in an alert regarding unauthorized Venmo charges, first login directly to your Venmo account through the official mobile app or website to confirm any issues.
Cross-reference dates, amounts, merchant names, and other charge details listed in the alert against actual account activity for accuracy. If the charges only appear in the alert but not your account, it’s likely a scam.
Verify Support Contacts
Use Venmo’s official customer service phone number, email, live chat, or support pages to follow up if account issues persist after reviewing charges.
Do not communicate outside of these authenticated platforms, especially in response to random text or emails. Reaching out directly allows you to verify representatives are in fact affiliated with Venmo before sharing any sensitive account details or granting device access.
What to Do If You’ve Fallen Victim
If you receive a suspicious Venmo fraud alert and call the number provided or otherwise give remote access to your device, here are important steps to take right away:
Disconnect Compromised Devices from Networks
If a scammer has gained control over one of your devices, immediately disconnect it from any WiFi or wired internet to stop the attack. This may prevent further data loss or ransomware deployment across connected networks.
Contact Banks and Change Account Passwords
Next, use a separate uncompromised device to access your financial accounts and change any passwords stored on the infiltrated device. Closely monitor bank and credit card statements for signs of unauthorized access. Report any suspicious charges to institutions right away.
Wipe Affected Devices and Reset Passwords
For devices that have been remotely accessed by attackers, conduct a factory reset to wipe them clean of potential malware or spyware. Make sure to change all account passwords after resetting mobile devices and computers. Enable two-factor authentication wherever available as an additional security layer.
Scan Networks for Other Compromised Systems
Check all systems on your home or office network for signs they have been impacted. Unexplained crashes, slow performance, strange popups, or inability to access your own files could indicate ransomware or spyware installations resulting from the remote access breach. These devices may also need to be reset.
Notify Relevant Institutions of the Attack
File reports of fraud and unauthorized access with banks, credit card companies, Venmo, and other institutions tied to accounts potentially caught up in the breach. Provide details on how access was gained by the scammer for accurate tracking and reimbursement claims if money was stolen.
Consider an Identity Theft Protection Service
A credit monitoring or identity theft protection services can also help act as an early warning system for new fraudulent accounts or transactions opened in your name following a data breach. This can minimize financial loss and alert you to further suspicious use of stolen personal information.
Is Your Device Infected? Scan for Malware
If your computer or phone is slow, showing unwanted pop-ups, or acting strangely, malware could be the cause. Running a scan with Malwarebytes Anti-Malware Free is one of the most reliable ways to detect and remove harmful software. The free version can identify and clean common infections such as adware, browser hijackers, trojans, and other unwanted programs.
Malwarebytes works on Windows, Mac, and Android devices. Choose your operating system below and follow the steps to scan your device and remove any malware that might be slowing it down.
Malwarebytes for WindowsMalwarebytes for MacMalwarebytes for Android
Run a Malware Scan with Malwarebytes for Windows
Malwarebytes stands out as one of the leading and widely-used anti-malware solutions for Windows, and for good reason. It effectively eradicates various types of malware that other programs often overlook, all at no cost to you. When it comes to disinfecting an infected device, Malwarebytes has consistently been a free and indispensable tool in the battle against malware. We highly recommend it for maintaining a clean and secure system.
Download Malwarebytes
Download the latest version of Malwarebytes for Windows using the official link below. Malwarebytes will scan your computer and remove adware, browser hijackers, and other malicious software for free.
(The above link will open a new page from where you can download Malwarebytes)
Install Malwarebytes
After the download is complete, locate the MBSetup file, typically found in your Downloads folder. Double-click on the MBSetup file to begin the installation of Malwarebytes on your computer. If a User Account Control pop-up appears, click “Yes” to continue the Malwarebytes installation.
Follow the On-Screen Prompts to Install Malwarebytes
When the Malwarebytes installation begins, the setup wizard will guide you through the process.
You’ll first be prompted to choose the type of computer you’re installing the program on—select either “Personal Computer” or “Work Computer” as appropriate, then click on Next.
Malwarebytes will now begin the installation process on your device.
When the Malwarebytes installation is complete, the program will automatically open to the “Welcome to Malwarebytes” screen.
On the final screen, simply click on the Open Malwarebytes option to start the program.
Enable “Rootkit scanning”.
Malwarebytes Anti-Malware will now start, and you will see the main screen as shown below. To maximize Malwarebytes’ ability to detect malware and unwanted programs, we need to enable rootkit scanning. Click on the “Settings” gear icon located on the left of the screen to access the general settings section.
In the settings menu, enable the “Scan for rootkits” option by clicking the toggle switch until it turns blue.
Now that you have enabled rootkit scanning, click on the “Dashboard” button in the left pane to get back to the main screen.
Perform a Scan with Malwarebytes.
To start a scan, click the Scan button. Malwarebytes will automatically update its antivirus database and begin scanning your computer for malicious programs.
Wait for the Malwarebytes scan to complete.
Malwarebytes will now scan your computer for browser hijackers and other malicious programs. This process can take a few minutes, so we suggest you do something else and periodically check the status of the scan to see when it is finished.
Quarantine detected malware
Once the Malwarebytes scan is complete, it will display a list of detected malware, adware, and potentially unwanted programs. To effectively remove these threats, click the “Quarantine” button.
Malwarebytes will now delete all of the files and registry keys and add them to the program’s quarantine.
Restart your computer.
When removing files, Malwarebytes may require a reboot to fully eliminate some threats. If you see a message indicating that a reboot is needed, please allow it. Once your computer has restarted and you are logged back in, you can continue with the remaining steps.
Once the scan completes, remove all detected threats. Your Windows computer should now be clean and running smoothly again, free of trojans, adware, and other malware.
If your current antivirus allowed this malicious program on your computer, you may want to consider purchasing Malwarebytes Premium to protect against these types of threats in the future. If you are still having problems with your computer after completing these instructions, then please follow one of the steps:
Malwarebytes for Mac is an on-demand scanner that can destroy many types of malware that other software tends to miss without costing you absolutely anything. When it comes to cleaning up an infected device, Malwarebytes has always been free, and we recommend it as an essential tool in the fight against malware.
Download Malwarebytes for Mac.
You can download Malwarebytes for Mac by clicking the link below.
When Malwarebytes has finished downloading, double-click on the setup file to install Malwarebytes on your computer. In most cases, downloaded files are saved to the Downloads folder.
Follow the on-screen prompts to install Malwarebytes.
When the Malwarebytes installation begins, you will see the Malwarebytes for Mac Installer which will guide you through the installation process. Click “Continue“, then keep following the prompts to continue with the installation process.
When your Malwarebytes installation completes, the program opens to the Welcome to Malwarebytes screen. Click the “Get started” button.
Select “Personal Computer” or “Work Computer”.
The Malwarebytes Welcome screen will first ask you what type of computer are you installing this program, click either Personal Computer or Work Computer.
Click on “Scan”.
To scan your computer with Malwarebytes, click on the “Scan” button. Malwarebytes for Mac will automatically update the antivirus database and start scanning your computer for malware.
Wait for the Malwarebytes scan to complete.
Malwarebytes will scan your computer for adware, browser hijackers, and other malicious programs. This process can take a few minutes, so we suggest you do something else and periodically check on the status of the scan to see when it is finished.
Click on “Quarantine”.
When the scan has been completed, you will be presented with a screen showing the malware infections that Malwarebytes has detected. To remove the malware that Malwarebytes has found, click on the “Quarantine” button.
Restart computer.
Malwarebytes will now remove all the malicious files that it has found. To complete the malware removal process, Malwarebytes may ask you to restart your computer.
After scanning, delete any detected threats. Your Mac should now be free from adware, unwanted extensions, and other potentially harmful software.
If your current antivirus allowed a malicious program on your computer, you might want to consider purchasing the full-featured version of Malwarebytes Anti-Malware to protect against these types of threats in the future. If you are still experiencing problems while trying to remove a malicious program from your computer, please ask for help in our Mac Malware Removal Help & Support forum.
Run a Malware Scan with Malwarebytes for Android
Malwarebytes for Android automatically detects and removes dangerous threats like malware and ransomware so you don’t have to worry about your most-used device being compromised. Aggressive detection of adware and potentially unwanted programs keeps your Android phone or tablet running smooth.
Download Malwarebytes for Android.
You can download Malwarebytes for Android by clicking the link below.
In the Google Play Store, tap “Install” to install Malwarebytes for Android on your device.
When the installation process has finished, tap “Open” to begin using Malwarebytes for Android. You can also open Malwarebytes by tapping on its icon in your phone menu or home screen.
Follow the on-screen prompts to complete the setup process
When Malwarebytes will open, you will see the Malwarebytes Setup Wizard which will guide you through a series of permissions and other setup options. This is the first of two screens that explain the difference between the Premium and Free versions. Swipe this screen to continue. Tap on “Got it” to proceed to the next step. Malwarebytes for Android will now ask for a set of permissions that are required to scan your device and protect it from malware. Tap on “Give permission” to continue. Tap on “Allow” to permit Malwarebytes to access the files on your phone.
Update database and run a scan with Malwarebytes for Android
You will now be prompted to update the Malwarebytes database and run a full system scan.
Click on “Update database” to update the Malwarebytes for Android definitions to the latest version, then click on “Run full scan” to perform a system scan.
Wait for the Malwarebytes scan to complete.
Malwarebytes will now start scanning your phone for adware and other malicious apps. This process can take a few minutes, so we suggest you do something else and periodically check on the status of the scan to see when it is finished.
Click on “Remove Selected”.
When the scan has been completed, you will be presented with a screen showing the malware infections that Malwarebytes for Android has detected. To remove the malicious apps that Malwarebytes has found, tap on the “Remove Selected” button.
Restart your phone.
Malwarebytes for Android will now remove all the malicious apps that it has found. To complete the malware removal process, Malwarebytes may ask you to restart your device.
When the scan is finished, remove all detected threats. Your Android phone should now be free of malicious apps, adware, and unwanted browser redirects.
If your current antivirus allowed a malicious app on your phone, you may want to consider purchasing the full-featured version of Malwarebytes to protect against these types of threats in the future. If you are still having problems with your phone after completing these instructions, then please follow one of the steps:
Restore your phone to factory settings by going to Settings > General management > Reset > Factory data reset.
After cleaning your device, it’s important to protect it from future infections and annoying pop-ups. We recommend installing an ad blocker such as AdGuard. AdGuard blocks malicious ads, prevents phishing attempts, and stops dangerous redirects, helping you stay safe while browsing online.
Frequently Asked Questions
Still unsure if a Venmo alert is legitimate or related to the “Paxful Wallet” scam? This FAQ answers common questions for better scam detection.
What is the Paxful Wallet Venmo scam?
The Paxful Wallet Venmo scam involves fraudulent text messages or emails pretending a suspicious $99.99 charge was made to “Paxful Wallet” on your Venmo account. It provides a fake customer support number and urges victims to call about the unauthorized transaction. Scammers then pose as Venmo agents to gain remote device access for installing malware, stealing data, distributing ransomware and more.
What details should raise red flags?
Be suspicious of any Venmo alert with slight differences from official branding, bad grammar/formatting, or unfamiliar sender details not matching previous Venmo contacts. Analyze links and attachments closely as well before interacting. Cross-reference any listed transactions against your account directly rather than calling random numbers.
How do scammers profit?
By either immediately stealing Venmo balances or long-term harvesting of personal data and login credentials for wider identity theft or ransomware attacks after tricking victims into remote access. Once given control, devices are infected with malware or spyware to compromise connected accounts and networks too.
What should I do if I called the number?
If you connected with scammers posing as Venmo support, immediately disconnect compromised devices then reset passwords for financial accounts remotely accessed – starting with Venmo. Wipe affected devices to factory settings, scan networks checking for malware spread, notify relevant institutions of unauthorized access, and enroll in identity theft monitoring in case of future misuse.
How can the scam be avoided?
Always independently validate unfamiliar Venmo alerts rather than interacting outright. Cross-check sender details against previous Venmo contacts first, then review transactions directly in your account instead of via alerts before calling. Only use Venmo’s official support channels as needed rather than random communications. Never enable remote access without an authenticated verification process.
The Bottom Line
This Venmo phone scam starts with a message designed to provoke recipients into calling a fraudulent customer support line controlled by scammers. By pretending to be Venmo employees, the attackers gain remote access to devices and steal highly sensitive personal data and account access.
The consequences can range from cleaned out Venmo balances to wider identity theft given the breadth of financial and login information these scammers may harvest once given device access. That’s why it’s critical consumers learn to spot and avoid the scam entirely by verifying communications purporting be from Venmo or other financial institutions. If contact is made, strictly avoid granting any form of remote access to your device or accounts during a suspicious call.
Thomas is an expert at uncovering scams and providing in-depth reporting on cyber threats and online fraud. As an editor, he is dedicated to keeping readers informed on the latest developments in cybersecurity and tech.
