Re: Fake paypal email triggers -7.5 USER_IN_DEF_DKIM_WL From: address is in the default DKIM

On Wed, 2025-01-29 at 11:23 -0500, Alan via users wrote:
>  
> As far as I can tell, they're valid notifications from PayPal, and
> probably useful for legitimate purposes. What the messages are
> doing is attempting to trigger sufficient anxiety that the
> recipient calls the phone number in the message, which connects
> them to a scammer. It will get worse, and then hopefully the folks
> at PayPal will find a way to eliminate it (they could refuse to
> send a phone number in the message, for example).

If they're letting third parties provide any of the content in the
email, it'll get abused.