The recipient is told their account will be permanently disabled within 48 hours unless the user logs-in using the link provided within the email to ‘update account details’ and ‘activate your account’.
The link sends you to a fake PayPal login portal where your details will be harvested.
If you receive the email:
- do not click on the link
- do not enter any information.
If you think you might be the victim of a scam, cybercrime or identity theft, find out how to get help from ACSC’s website at cyber.gov.au