Skip to main content

Image
Report phishing scams •	Forward the email: reportphishing@apwg.org •Tell the FTC: ReportFraud.ftc.gov

If you got an email that seems to be from MetaMask or PayPal, stop. They’re phishing scams. The MetaMask fake says your cryptocurrency wallet is blocked. And, if you don’t act fast, click a link, and update your wallet, they say your crypto will be lost. The phony PayPal message says BNC Billing cancelled your payment to Binance — and it gives you a phone number to reach PayPal…except that’s a scam, too. If you get one of the messages, delete it. But what then?

Most unexpected emails saying to act quickly, click a link, or call a number are phishing scams. They may look like they come from companies you know, but they’re from scammers who want you to think the message is real. That way, scammers think you’ll click into a fake website or call an actual scammer — all to solve a fake problem. If you click or call, the scammers will steal your financial or personal information, and that could lead to identity theft.

Here are examples of these fake phishing emails:

Image
PayPal Binance Phishing Sample Email

Image
MetaMask Phishing Sample Email

To spot and avoid a phishing scam:

  • Slow down. Ask yourself: Do I have an account with the company? Do I know whoever sent the email? If “no,” it’s a phishing attempt. If “yes,” still check it out. Contact the company using a number or website you know is real. And, if you own a cryptocurrency wallet and have a concern, contact the cryptocurrency exchange that holds your wallet.
  • Don’t click on any links. Links in unexpected texts or emails could lead to identity theft or let scammers install malware.
  • Update your security software. This will protect your phone and computer from security threats, which could expose your personal or financial information to scammers.

If you get a phishing email, forward it to the Anti-Phishing Working Group at reportphishing@apwg.org. Then tell the FTC at ReportFraud.ftc.gov.

It is your choice whether to submit a comment. If you do, you must create a user name, or we will not post your comment. The Federal Trade Commission Act authorizes this information collection for purposes of managing online comments. Comments and user names are part of the Federal Trade Commission’s (FTC) public records system, and user names also are part of the FTC’s computer user records system. We may routinely use these records as described in the FTC’s Privacy Act system notices. For more information on how the FTC handles information that we collect, please read our privacy policy.

The purpose of this blog and its comments section is to inform readers about Federal Trade Commission activity, and share information to help them avoid, report, and recover from fraud, scams, and bad business practices. Your thoughts, ideas, and concerns are welcome, and we encourage comments. But keep in mind, this is a moderated blog. We review all comments before they are posted, and we won’t post comments that don’t comply with our commenting policy. We expect commenters to treat each other and the blog writers with respect.

  • We won’t post off-topic comments, repeated identical comments, or comments that include sales pitches or promotions.
  • We won’t post comments that include vulgar messages, personal attacks by name, or offensive terms that target specific people or groups.
  • We won’t post threats, defamatory statements, or suggestions or encouragement of illegal activity.
  • We won’t post comments that include personal information, like Social Security numbers, account numbers, home addresses, and email addresses. To file a detailed report about a scam, go to ReportFraud.ftc.gov.

We don't edit comments to remove objectionable content, so please ensure that your comment contains none of the above. The comments posted on this blog become part of the public domain. To protect your privacy and the privacy of other people, please do not include personal information. Opinions in comments that appear in this blog belong to the individuals who expressed them. They do not belong to or represent views of the Federal Trade Commission.

Eugene deFouw
May 10, 2023

I just got one of those emails. I have forwarded it to you per your instructions.
Thanks for the info.
I always check the email address of the sender and the return email address before I reply.
In most cases theses addresses are not from the true company requesting the $$.
Duh?

bluebrad
May 11, 2023

i would love to see all companys that have invoicing services to have a report button at the bottom of there invoices.

Philip Adimari
May 10, 2023

I received this text message from (438) 609-9601: "ALERT! Primy Ergonomic Office Chair Order ID-64TGTDF $677.00 has been charged to your CARD ON APR 20,2023 IF you not? Ring us +16592094601." Since the 438 Area Code is in Montreal, my guess is that the scammer is making money from the poor sucker who calls them back to dispute the charge.

TheExpected Pr…
May 10, 2023

We thank you for your tremendous community service in serving the broad audience Well done

Garush
May 10, 2023

Just got an email on this. want it? it said I purchased something that I know I did not, and would not purchase, that I paid with pay-pal (which I never used). and that I should reply if I had any questions - which of course I did not.
also, what is wrong with this pay pal organization???

William Cline
May 10, 2023

I am waiting for a national "911" type e-mail address to send ALL suspected security threats. I have at least 10 different e-mails from various sources to report scams--all are too complicated. AI should separate false positives from the real issues. I am also waiting to hear scammers are being put in prison. If it has ever happened, I have not seen it reported in the news. Basically, constant warnings from dot gov, but no real action or protection.

FTC Staff
May 10, 2023

In reply to by William Cline

Get news about FTC actions at https://www.ftc.gov/news-events. The FTC is a civil law enforcement agency. The United States Department of Justice brings criminal enforcement actions and shares news through its Office of Public Affairs. For example, on April 26, DOJ announced "Three Nevada Men Convicted in Multimillion Dollar Prize Notice Scheme." Read more at https://www.justice.gov/opa/pr/three-nevada-men-convicted-multimillion-…. Get more DOJ news at https://www.justice.gov/opa.

Beverly J Gerig
May 10, 2023

I have been getting alot of texting along the same tract. Do you have any advise about those?

Mr. Ed
May 11, 2023

I have an email by PayPal that said that I owe then some money and that I need to clip to resolve the problem. I did not deal with PayPal for a long time how can I own anything to them. And I also receive and alert from Facebook that someone is trying to log into your account. I don't even have a Facebook account it look like phishing and it delete.

Bonnie J Hargrave
July 10, 2023

Please change the reportphishing and reportfraud email addresses to text so we can cut/paste them into our email when forwarding it to them. The graphics are nice and big, but you can do that in text also and make it easier for us.