Can someone tell PayPal to stop sending “phishing” emails?

9 points

6 years ago

I got an email from PayPal this morning about upcoming changes to their legal agreements. It did not include the changes; instead it told me to go review them at a link beginning with:

    https://epl.paypal-communication.com/

...followed by indecipherable tracking codes.

I think it's legit, but I feel like the company is pushing me to click a link that smells like a phishing campaign (in order to review ToS changes they made without my consent). The domain has confused others [1][2], is blocked by uBlock Origin, and it's even been discussed here before [3].

Paypal often reminds me to be wary of phishing scams. Is there a good reason they can't use a subdomain of paypal.com instead?

----

[1] https://security.stackexchange.com/questions/182161/why-would-paypal-send-messages-from-another-domain

[2] https://www.reddit.com/r/paypal/comments/4qlnf0/is_this_a_phishing_attempt/

[3] https://hn.algolia.com/?query=paypal-communication.com&dateRange=custom&dateEnd=1592956800&dateStart=1465948800&prefix=true&type=all

2 comments