Fake PayPal invoice from Geek Squad is a tech support scam

A Malwarebytes article warns about a tech support scam masquerading as a PayPal invoice, sent to a wide audience from a Gmail address. The piece notes PayPal does not use Gmail for invoices and official communications do not include recipients in the blind carbon copy field; emails from random Gmail addresses are a major red flag.

Although SPF, DKIM and DMARC pass, that only shows the message wasn’t spoofed and may have come from a legitimate Gmail server, not PayPal itself, the red flags include an empty email body with a branded invoice attachment and a prompt to pay $823 within 24 hours. The scammers push the target to call a phone number and remotely log in to their computer, a classic tech support scam pattern, and the invoice would often appear branded for Geek Squad rather than PayPal.

Malwarebytes Scam Guard is recognised as having identified this email as a scam, and the article discusses practical safety tips and steps if a victim has already fallen for it. According to Malwarebytes, stay wary of unsolicited attachments, use official contact channels, and report suspicious activity. 30 October 2025.