Don’t Get Tricked By the Clixpert Pty Ltd PayPal Payment Scam

A devious new phishing scam has emerged that leverages PayPal’s name and payment confirmation templates to trick recipients. Fraudsters are sending fake “You sent a payment” emails stating you paid Clixpert Pty Ltd $390 for a service renewal you never purchased.

The scam messages claim the charge already processed from your connected bank account or card. They provide an 808 number to call if you want to dispute the “unauthorized transaction”. However, this number leads to manipulative scammers seeking your financial details.

This ruse combines PayPal’s brand recognition with a legitimate-sounding company name, service codes, and payment terminology to seem totally credible. But the entire thing is an elaborate con crafted to hijack accounts, steal identities, and siphon funds from victims.

In this comprehensive guide, we’ll reveal how the Clixpert PayPal payment scam works, red flags to watch for, and steps to take if you receive one of these deceptive emails. Insight into their methods is key to avoiding becoming the next victim.

scam 2

Overview of the Clixpert Pty Ltd PayPal Scam

This cunning phishing scam exploits PayPal’s reputation and payment confirmation templates to trick recipients. The scammers send fake “You sent a payment” emails stating you already paid Clixpert Pty Ltd $390 for a service renewal.

The messages claim the bogus charge already processed from your connected bank account or card. They provide an 808 number to call if you want to dispute the “unauthorized transaction.” However, this number actually leads to smooth-talking scammers seeking your financial details.

By including PayPal branding and legitimate-sounding company names, service codes, and payment terminology, the fake confirmations seem totally credible. But it’s just an elaborate ruse to hijack accounts, steal identities, and siphon funds.

Here are some examples of the deceptive Clixpert PayPal payment scam emails:

“According to our records, you sent a payment of $390 to Clixpert Pty Ltd for service renewal MAH28370195-FAE581 on 3/27/2024. If you did not authorize this charge, please call 808-809-7924 immediately to dispute the transaction.”

“You sent a payment of $390.00 to Clixpert Pty Ltd for service renewal MAH28370195-FAE581 on March 27, 2024. If fraudulent, call 808-809-7924 right away to halt the unauthorized transaction.”

“Our system indicates you sent $390 to Clixpert Pty Ltd (MAH28370195-FAE581) on 3/27/2024. If you did not send this payment, call 808-809-7924 as soon as possible to report the unauthorized transaction.”

The goal is to make the payment seem real so you’ll urgently call to reverse the bogus charge. But the number actually leads to criminals who leverage manipulative psychology and social engineering tactics to steal financial data.

Once on the phone, the scammers may:

  • Claim the payment was for a subscription or service you forgot about
  • Warn your computer is infected to get remote access
  • Verify personal info to appear legitimate
  • Pose as PayPal managers to assert authority
  • Pretend a refund is processing after account verification
  • Insist the dispute window has closed already
  • Offer discounted software or services to compensate
  • Say bank policy requires the authorized payment must still process

With enough persuasion, the criminals can harvest credit cards, online account logins, SSNs, and gift card codes from frightened call recipients. The scammers then swiftly drain compromised accounts and launder the stolen funds through cryptocurrency exchanges before victims can react.

This demonstrates how a single phishing email can snowball into complete financial identity theft with just one quick phone call if the recipient doesn’t realize it’s a scam.

Now let’s examine how this scam strategically unfolds step-by-step.

How the Clixpert PayPal Scam Works

While simple in concept, successful execution requires careful planning and manipulation tactics. Here’s how it operates:

1. Recipient Emails Are Compiled

Scammers purchase or steal massive databases containing millions of target email addresses, names, phone numbers, and other personal info.

2. Fake Payment Confirmations Are Created

Using official logos and templates, the scammers craft counterfeit PayPal payment confirmations to Clixpert Pty Ltd for $390 service renewals.

3. Confirmations Are Sent En Masse

The fraudsters blast out enormous batches of the fake PayPal payment confirmations to the compiled list of recipient emails.

4. Recipients Open and Review Notices

Upon opening the emails, recipients are alarmed to see an unknown $390 Clixpert transaction supposedly already deducted from their connected PayPal account.

5. Victims Call the Scam Number

Fearing unauthorized account charges, many now urgently call the 808 or other number listed, hoping to cancel the bogus payment.

6. Scammers Pose as PayPal Support Agents

When victims call, the criminals answer acting like convincing PayPal billing reps to appear legitimate.

7. Scammers Request Remote Access

Claiming they must diagnose technical issues allowing the “unauthorized” payment, the scammers try to get remote access to the victim’s computer.

8. Accounts Get Hijacked Once Access Is Granted

With remote access granted, the scammers can steal account logins, deploy malware, harvest data, and take over accounts.

9. Fake Services and Charges Occur

Alternately, the crooks may sell unneeded services, useless software, or completely fictional fees that must be paid immediately.

10. Financial and Personal Data Is Harvested

Using manipulative psychology, the scammers obtain credit cards, online banking usernames/passwords, SSNs, and gift card codes from the victims.

11. Money Is Stolen and Laundered

The criminals swiftly drain compromised bank accounts and launder the stolen money through cryptocurrency exchanges before the victim has time to react.

This demonstrates how a single phishing email can eventually decimate someone’s finances, identity, and credit score if they call the number provided without realizing it’s a scam. Next we’ll cover steps to take if you already got duped.

What to Do if You’ve Been Scammed By This PayPal Con

If you already contacted the scammers and supplied payment info or account access, take these steps right away:

1. End All Contact with the Scammers

If still on the call, hang up immediately. Block their number to halt further manipulation. Never contact them again for any reason.

2. Notify Your Bank and PayPal

Alert your bank and PayPal that your account details may be compromised. Freeze or close accounts if unauthorized charges occurred.

3. Reset ALL Passwords

Change the passwords on every online account, especially email, PayPal, and online banking. Enable two-factor authentication for added security.

4. Scan Devices for Malware

Run comprehensive antivirus and malware scans to uncover anything covertly installed by the scammers during remote access. Remove any threats detected immediately.

5. Monitor Accounts Closely

Watch all accounts closely over the next several months for fraudulent activity stemming from the stolen personal data.

6. File Police Reports

File detailed scam reports with local law enforcement and provide supporting documentation. This creates an official record of the crime.

7. Report Details to Relevant Institutions

Inform PayPal, banks affected, credit card companies, and government agencies about the scam to aid investigations.

Acting swiftly following an attack limits damage and prevents further misuse of any compromised information. Overcome fear or embarrassment and speak up about scams immediately to protect yourself and others.

Frequently Asked Questions About the Fake Clixpert PayPal Payment Scam

1. What is the Clixpert Pty Ltd PayPal payment scam?

This is a phishing scam where scammers send fake PayPal emails stating you already sent a $390 payment to Clixpert Pty Ltd for a service renewal. The emails provide an 808 number to call to reverse the bogus transaction. However, the number leads to manipulative scammers seeking your financial details.

2. How does the scam payment confirmation email appear?

The fake confirmations use PayPal logos and billing terminology. They reference your name, a Clixpert payment, a service renewal code, and a $390 amount. The scammers want it to seem like a real transaction occurred.

3. Why do they want me to call them?

By getting you on the phone, scammers can leverage psychology tactics and social engineering to gain remote access to your device, trick you into buying gift cards, steal your credit card or bank info, or harvest other sensitive personal data.

4. What techniques do the scammers use on the phone?

They may pretend to be PayPal agents, insist the payment was authorized, warn your computer is infected to get remote access, offer refunds after account “verification”, claim dispute windows closed, sell unneeded services, or assert bank policies force you to pay.

5. What are the scammer’s ultimate goals?

They want to steal your credit card number, bank account logins, Social Security number, or take over your computer remotely to deploy ransomware or steal personal data for identity theft.

6. What should I do if I get a suspicious PayPal Clixpert payment email?

Do NOT call the phone number in the email. Report the fake payment notice to PayPal as phishing. Check your PayPal account to confirm you did not actually make the payment. Delete the scam email right away.

7. I already called the scammers. What now?

End all contact immediately and block their number. Alert your bank and PayPal of potential account compromise. Reset all passwords and run antivirus scans to check for malware. Monitor your accounts closely for fraudulent charges and report the scam to authorities. Do NOT provide the scammers with any additional sensitive information or payments.

8. How can I avoid falling for this scam?

Use extreme caution with any unexpected payment emails demanding you call to reverse a charge. Independently verify bills through official company channels before calling random numbers or providing personal information to strangers.

9. How can I better secure my PayPal account?

Always use complex unique passwords. Enable two-factor authentication. Check your account often for unknown payments. Only link cards or accounts to PayPal that you fully trust. Never share PayPal credentials with anyone.

The Bottom Line

The fake Clixpert PayPal payment confirmation scam preys on brand recognition and urgency to dispute supposedly unauthorized charges. By posing as a major online payment provider, the scammers aim to manipulate quick call-back compliance from recipients.

But with insight into their psychological tricks, this attack can be spotted before getting hooked. Use extreme caution with any unexpected payment emails demanding immediate account verification. Independently confirm transactions are real before calling random numbers or providing personal data to strangers.

Remember:

  • Verify bills by contacting the company directly through official channels only.
  • Don’t trust urgent appeals for your private account or financial information.
  • Never provide credit cards, account logins, or access to unsolicited callers.

Stay alert online and over the phone to spot signs of potential scams. End any questionable interactions right away. With knowledge, modern phishing and phone scams can be defeated. Don’t become the next victim of the fake Clixpert PayPal payment scam.

How to Stay Safe Online

Here are 10 basic security tips to help you avoid malware and protect your device:

  1. Use a good antivirus and keep it up-to-date.

    Shield Guide

    It's essential to use a good quality antivirus and keep it up-to-date to stay ahead of the latest cyber threats. We are huge fans of Malwarebytes Premium and use it on all of our devices, including Windows and Mac computers as well as our mobile devices. Malwarebytes sits beside your traditional antivirus, filling in any gaps in its defenses, and providing extra protection against sneakier security threats.

  2. Keep software and operating systems up-to-date.

    updates-guide

    Keep your operating system and apps up to date. Whenever an update is released for your device, download and install it right away. These updates often include security fixes, vulnerability patches, and other necessary maintenance.

  3. Be careful when installing programs and apps.

    install guide

    Pay close attention to installation screens and license agreements when installing software. Custom or advanced installation options will often disclose any third-party software that is also being installed. Take great care in every stage of the process and make sure you know what it is you're agreeing to before you click "Next."

  4. Install an ad blocker.

    Ad Blocker

    Use a browser-based content blocker, like AdGuard. Content blockers help stop malicious ads, Trojans, phishing, and other undesirable content that an antivirus product alone may not stop.

  5. Be careful what you download.

    Trojan Horse

    A top goal of cybercriminals is to trick you into downloading malware—programs or apps that carry malware or try to steal information. This malware can be disguised as an app: anything from a popular game to something that checks traffic or the weather.

  6. Be alert for people trying to trick you.

    warning sign

    Whether it's your email, phone, messenger, or other applications, always be alert and on guard for someone trying to trick you into clicking on links or replying to messages. Remember that it's easy to spoof phone numbers, so a familiar name or number doesn't make messages more trustworthy.

  7. Back up your data.

    backup sign

    Back up your data frequently and check that your backup data can be restored. You can do this manually on an external HDD/USB stick, or automatically using backup software. This is also the best way to counter ransomware. Never connect the backup drive to a computer if you suspect that the computer is infected with malware.

  8. Choose strong passwords.

    lock sign

    Use strong and unique passwords for each of your accounts. Avoid using personal information or easily guessable words in your passwords. Enable two-factor authentication (2FA) on your accounts whenever possible.

  9. Be careful where you click.

    cursor sign

    Be cautious when clicking on links or downloading attachments from unknown sources. These could potentially contain malware or phishing scams.

  10. Don't use pirated software.

    Shady Guide

    Avoid using Peer-to-Peer (P2P) file-sharing programs, keygens, cracks, and other pirated software that can often compromise your data, privacy, or both.

To avoid potential dangers on the internet, it's important to follow these 10 basic safety rules. By doing so, you can protect yourself from many of the unpleasant surprises that can arise when using the web.

Leave a Comment