Description

I saw the email in my spam folder from PayPal stating: "Account Notice: A recent activity of $857.30 transaction was recorded with a new profile. If this was not your action, reach us at +1(805) 500-3269. If correct, you can disregard this alert. Auto pending bill accepted from this account.Your New Account added you to the Crypto Wallet account. Your user ID: receipt34537 Use this link to finish setting up your profile for this account. The link will expire in 24 hours." Unfortunately, I called the phone #, they said I needed to download Any Desk to set-up two factor verification and sent me to this site: www.bring2factor.com. I downloaded the file and then logged into my paypal, then they asked that I log into my bank account, again stating it was required to refund my money and 'unlink my bank account from paypal" which seemed odd to me. My PayPal account did show the first transaction as 'cancelled' but then there was another charge. I knew something was wrong when they kept denying having access to my computer but I could clearly see they were still controlling it. They also had to transfer me to someone else to refund my money due to an additional fraudulent charge that happened while I was on the phone with them... perfect timing, rather suspect. I finally hung up, restarted my computer, deleted the software they asked me to download and ran a security scan. I also had my wife change our banking password. Another red flag is when they asked me to sign in to other accounts linked to my Paypal, a credit card I didn't use anymore to 'be sure there were no fraudulent charges'. I notified PayPal via their phishing inbox email address. This was a pretty sophisticated scam, I'm concerned with what other data they got off my computer before I ended the call, turned off my machine and deleted the software. Thank you for your help.