Payfast Payment Confirmation Phishing Email.

Payfast Payment Confirmation Phishing Email.

 

Scammers send out phishing emails mimicking Payfast communications with embedded phishing URLs masked by the HTML, Click Here button. Once the button is clicked you are taken to a website that looks like Payfast where you log in with your Payfast username and password. The scammers steal your login details and then attempt to login into the authentic Payfast gateway to steal funds and personal financial details.

How to tell if an email came from Payfast or not? Firstly, review the sender’s email address as Payfast emails will only come from addresses ending with Payfast.co.za. This is no guarantee as email headers can be spoofed appearing to be sent by Payfast.co.za. Scammers have improved so much that scammer emails are more difficult to spot because of the use of logos as trust factors and HTML masking the phishing URL behind a Click Here button,

Am I expecting a Payfast payment and how much? Always check your Payfast account for payments received. Always log into your Payfast account to confirm that you’ve received payments.

 

Check for bad spelling or grammar and poorly placed logos. 

Payfast sends automated messages when you make a payment, sign up for our services, and communicate with you via a newsletter or system updates. You can activate/deactivate automatic email notifications. Payfast only processes payments and will never ask for shipping confirmation messages or waybills or tracking numbers. Scammers want you to immediately part with your goods and usually ask for a tracking number before payments reflect in your account.

Payfast will never ask for sensitive financial information such as credit card numbers or banking details via email.

Make sure the URL is a legitimate Payfast domain and be careful of any URL shortener. PayFast URL shortener payf.st/.

Do not open any links, provide any sensitive information or send off goods if you think you’re dealing with a scammer.