About a month ago, I received a scam email that almost tricked me.
It purported to be from PayPal, alerting me to an almost $1,000 charge that was “logged to a new profile.” The message implied that some kind of crypto wallet was connected to my account, and it provided a number to call if I didn’t recognize the activity.
Normally I’d disregard this kind of message as obviously fraudulent, but I saw that the email came from a legitimate @paypal.com address. It also included a “set up your profile” button at the bottom, which my browser showed as a link to PayPal’s actual website.
I eventually deduced that this was, in fact, a scam and I could safely disregard the email. But making that determination required looking deeper than the usual tips about how to spot fraudulent messages.
This