PayPal subscriptions abused to send fake purchase emails

An email scam is abusing abusing PayPal’s “Subscriptions” billing feature to send legitimate PayPal emails that contain fake purchase notifications embedded in the Customer service URL field.

Over the past couple of months, people have reported receiving emails from PayPal stating, “Your automatic payment is no longer active.” 

The email includes a customer service URL field that was somehow modified to include a message stating that you purchased an expensive item, such as a Sony device, MacBook, or iPhone.

Read more at Bleeping Computer