“Scammers are using invoices sent through PayPal.com to trick recipients into calling a number to dispute a pending charge.”
The fake $600 Walmart gift card charge comes from PayPal’s own servers. Every spam filter waves it through. Victims call the number and get told to install remote access software. PayPal built a free phishing delivery service and lets anyone use it.