Is this a fraud?

[elainepan]

I received an invoice which was suspicious, unfortunately, I did call back the number on the email, and the agent led me to download a app from rmus.pro called "connectWiseControl" and installed it. Seems like it led them to access my screen.

the screen connect lasted for a few minutes during which I cannot see what happened to my screen

The email appeared to be from paypal email that was verified by gmail. but I don't see such invoice listed when logging to my account

I didn't provide any personal information of password during the call, but I don't know what did the screen connect do, so I want to check what security concern should I have

Is is a fraud? If It is, what's their play? The concern I can spot is the share screen time which was invisible to me, otherwise I wasn't asked any password, personal info, security code etc.

what should I do now?

[sharpiemarker]

@elainepan 

Yes, fraud, It is the PayPal Invoice scam. Scammers open PayPal accounts to do fraud by sending PayPal Invoices to unsuspecting PayPal users with phone number that is direct line to scammer who will try to get access your computer. The thing to do in such cases is to try to unplug your computer or turn it off by holding the power button down if you can.

If you do not see the invoice in your account is maybe the scammer logged on to remove/archived it to cover their tracks or PayPal’s system caught it and removed it.

You need to change passwords for all your online accounts (including PayPal) to be on the safe side. Scammers will definitely go directly to find passwords or any personal information on your computer while your screen was hidden and definitely remove the app you downloaded.

[PayPal_Meghan]

Hello @elainepan and @sharpiemarker, 

Welcome to the PayPal Community, @elainepan, and thank you for those great tips, @sharpiemarker! 

I understand you received a suspicious email and called the number attached to it. I'm sorry for the concern this has caused, and I'll be happy to provide some clarity. PayPal agents will never ask you to download an app so they can take control of your device. As @sharpiemarker said, it sounds like someone had tried sending you a fake invoice through PayPal. If you can see it on your account, you can delete it. However, it may have already been removed by PayPal or the sender.

Unplugging your device is a great idea. If, for some reason, that doesn't work, I have a few additional tips to take control of your device again. Please immediately remove the app from your device, if you haven't already. Next, run a virus and malware scan. The malware scan is important because the app may have downloaded more files onto your device during that time you couldn't see your screen. 

While running the scan, I recommend changing your password on any account that was logged into that device. If you have a second device, change the passwords on that device. If you only have one, it might be beneficial to wait until you've completed the virus and malware scan to ensure your device is safe and clean. I have a few Help Center links that will help you with updating your information on PayPal and how to keep your account secure. I will include them below. 

How do I change my password and security questions?

How do I turn on or off 2-step verification for PayPal account login?
 

How do I spot and report a fake, fraudulent, spoof, or phishing emails?

I hope this information helps you resecure your device and your account. Stay safe! 

- Meghan