The Latest Scams

Don’t Fall for This PayPal Scam: What You Need to Know

January 23, 2025

Millions of people rely on PayPal for secure online payments, but cybercriminals have found a way to exploit this trusted platform. A new scam targets unsuspecting users with legitimate-looking PayPal emails, making it harder to identify the threat. Here’s how the scam works and how you can protect yourself.

How the Scam Works

You receive what appears to be a legitimate email from PayPal, requesting payment. The email includes a real PayPal link and seems entirely authentic—it even comes from PayPal’s official email domain.

Here’s the catch: the email is also sent to another address you don’t recognize. This additional email address belongs to the cybercriminals. If you click the link in the email, their email address becomes linked to your PayPal account.

Once connected, the cybercriminals gain full access to your PayPal account. They can view your account details, including your login credentials and financial information, putting your personal and financial security at risk.

How to Protect Yourself

Stay safe from phishing scams like this by following these tips:

Avoid Clicking on Unexpected Emails
Even if an email seems to come from a trusted source like PayPal, avoid clicking on any links. Instead, go directly to the organization’s official website or app to handle payments or check your account.
Check Email Recipients
Pay close attention to who else is listed as a recipient in the email. Be wary of emails sent to multiple addresses, especially if you don’t recognize some of them.
Don’t Trust Emails Based Solely on the Sender’s Domain
Just because an email comes from a trusted domain doesn’t mean it’s safe. Cybercriminals can exploit legitimate domains to make their scams more convincing.

Stay Vigilant

Phishing scams are becoming increasingly sophisticated, and it’s essential to remain cautious when dealing with unexpected emails or payment requests. By staying informed and following these best practices, you can protect your financial information and avoid falling victim to scams.

As a KnowBe4 partner, Citynet is here to help you and your business stay secure. Contact us today to learn more about protecting your organization from cyber threats by providing security awareness training (SAT) from KnowBe4.

Like This Post?

Cybersecurity

Cybercriminals Are Now Calling Your Employees

Is Your Business Prepared? Cyber threats are evolving, and one of the fastest-growing tactics right now is social engineering through trusted communication platforms. Instead of trying to hack their way in, cybercriminals are increasingly talking their way in. Attackers are impersonating IT staff, executives, vendors, and even coworkers via phone calls and collaboration tools such as Microsoft Teams, Webex, and other messaging

March 5, 2026

Cybersecurity

Shadow IT: The Apps Your Employees Use That IT Doesn’t Know About

When most businesses think about cybersecurity risk, they picture hackers breaking in from the outside. But one of the fastest-growing risks isn’t external at all. It’s happening inside your organization…quietly, unintentionally, and often with good intentions. It’s called Shadow IT. And it’s growing faster than most businesses realize. What Is Shadow IT? Shadow IT refers to any software, app, cloud platform,

February 23, 2026

Cybersecurity

The New Employee Is Your Biggest Security Risk

(And It’s Not Their Fault) When businesses think about cybersecurity risk, they often picture hackers, ransomware, or sophisticated phishing attacks. But one of the most common — and overlooked — security risks starts on day one: A new employee. Not because they’re careless.Not because they’re malicious.But because onboarding and offboarding processes often leave dangerous gaps. If those gaps aren’t managed

February 23, 2026

Cybersecurity

The New Reality of Cyber Insurance Requirements for Small Businesses

Cyber insurance used to feel like a safety net. Today, it’s starting to feel more like an application for a mortgage. Across the country, insurance providers are tightening requirements, raising premiums, and even denying claims when businesses don’t meet modern cybersecurity standards. Many small and mid-sized organizations are discovering this shift the hard way, during policy renewal or after filing

February 19, 2026

Cybersecurity

Citynet and Red Siege Webinar Inside the Attacker’s Playbook

Cybersecurity isn’t just about defense — it’s about understanding how real attackers think. Join Citynet’s Craig Behr and Red Siege’s Tim Medin for an upcoming webinar, Inside the Attacker’s Playbook, where we’ll break down how real-world offensive operations uncover gaps — and how organizations can use those insights to reduce cyber risk before it becomes a business problem. Play Video

February 5, 2026

Cybersecurity

Cyber Protection During Tax Season: What You Need to Know

Tax season is stressful enough without worrying about cybercriminals. Unfortunately, this time of year is one of the busiest for online scams, phishing attacks, and data theft, targeting both households and businesses. From fake IRS emails to stolen login credentials and compromised devices, cybercriminals know tax season creates urgency and confusion, making it the perfect opportunity to strike. The good

February 2, 2026