We have received a series of spam emails all purporting to be from service@paypal.com . This address is spoofed but that is not obvious.

The mails take one of two forms: one is to refer to a "payment request" and the other purports to be an invoice due for immediate payment.

Delivered to the same email account here, the "to" field varies but is always of the format "order status[number]" dot [various domains]

The emails all contain what appear to be links to genuine paypal.com pages, including to report suspicious invoices (we have not checked, out of an abundance of caution).

There is a variety of numbers to call, none of which appear to be PayPal.

The amounts are in the high-hundreds of US dollars: usually x99 and all less than 1000.

All the "pay now" links are to PayPal accounts.

------------------------------------

UPDATE 20 December: there is a further significant number of the same styles of scam, in this case the "from" address is showing as "service at paypal .com" (without the spaces).

Again banks etc. are at risk of claims for refunds and it is arguable that email hosts which are not identifying this large scale attack are failing to protect their customers through adequate spam filters.