EN
Many people are recently receiving a strange PayPal email from SJ3 Norman Enterprises showing a tiny payment like “+Ft 1 HUF” or warning about a pending charge such as hundreds of dollars for Coinbase, Bitcoin, Geek Squad, Walmart, or another service they never ordered.
At first glance, the email looks real because it may come through PayPal’s actual invoice system and sometimes even appears connected to a genuine PayPal notification. This makes many people panic and think their account has been hacked. But in most cases, this is not a real purchase. It is a PayPal invoice scam designed to trick you into calling a fake customer service number.
According to PayPal, invoice scams often work by sending real invoices or money requests with alarming messages asking users to call a phone number urgently. PayPal clearly warns users not to pay, not to call those numbers, and to verify everything directly inside their PayPal account or app.
This scam uses the name SJ3 Norman Enterprises to make the invoice look like it came from a legitimate business.
A common version says something like: "Pre-fund confirmation: USD 987.90 is pending charge to Coinbase via PayPal. This small deposit is just used for the account activation check. For questions, call (888) 341-5322".
You can find more examples and additional details about how the SJ3 Norman Enterprises scam operates in NewsOnlineIncome.com's article.
Some users also report receiving a tiny amount like “Ft 1 HUF” (Hungarian currency) with the same message. Many people posted about getting the exact same email on Reddit, showing that this is a widespread campaign and not a normal transaction.
The purpose is simple and that is to scare you first, then make you call.
The scam usually follows these steps:
Step 1: You Receive a Frightening Invoice:
The email says you are being charged for something expensive like:
The amount is usually large enough to create panic, often between $500 and $3,500.
Step 2: A Fake Support Number Is Included:
The email says if you did not authorize the charge, call immediately to cancel. This is the real trap. Instead of contacting PayPal, you are calling scammers pretending to be PayPal support.
Step 3: They Try to Steal Information:
Once on the phone, scammers may ask for:
Some victims are told to install remote access software so the agent can help cancel the transaction. This gives scammers direct access to the computer and personal information.
This type of fraud is common in PayPal invoice scams and PayPal specifically warns users not to call phone numbers listed inside suspicious invoices.
This is what makes the scam dangerous. Sometimes the invoice is actually sent through PayPal’s real business invoicing system. Scammers create business accounts and send invoices from there, so the email may appear more trustworthy than a normal phishing email.
That means the message may not look fake at all. It may come from a legitimate PayPal notification and still be part of a scam because the scam is inside the invoice note itself but not necessarily the sender address. That is why simply checking whether the email looks official is not enough.
Users reported examples like:
The names may change, but the method stays the same. Sometimes scammers also use other names instead of SJ3 Norman Enterprises so people should focus on the behavior, not just the sender name.
Here are strong warning signs:
A real PayPal issue should always be checked by logging into your account directly, not by trusting the email.
If you receive this email:
SJ3 Norman Enterprises PayPal Invoice Scam Email is not a normal PayPal alert, it is usually part of a social engineering scam. The scammers use fear, urgency, and trust in the PayPal brand to push victims into calling fake support numbers. Once that happens, they try to steal money, account access, or sensitive personal information.
The safest rule is simple i.e. Never trust the phone number inside a suspicious invoice. Always verify directly through your PayPal account. If an email tries to rush you into action, slow down first, that pause can save your money.
Image Source: Pixabay.
Disclaimer: This article has been written by a Scam Fighter Contributor. If you believe the article above contains inaccuracies or needs to include relevant information, please contact ScamAdviser.com using this form.
