Thought I would let you guys know what happened to my BIL.
Yesterday at 1:30am someone made a purchase online using his Paypal info. They immediately sent 1,000 emails to his address to try to hide the legitimate email from Paypal asking him if he had made this purchase. Pretty ingenious and it probably usually works, because most people would have just erased all of them and moved on. Fortunately, he started deleting the fake ones and the real one came back up on his phone. They were able to stop the purchase because he caught it the day it happened and no harm done, except now he gets all new cards and passwords FOR EVERYTHING. They said if he would have not caught it that day, it would have gone through and he would have to go through a claim process to get it back. He is now a member of Lifelock.
Yesterday at 1:30am someone made a purchase online using his Paypal info. They immediately sent 1,000 emails to his address to try to hide the legitimate email from Paypal asking him if he had made this purchase. Pretty ingenious and it probably usually works, because most people would have just erased all of them and moved on. Fortunately, he started deleting the fake ones and the real one came back up on his phone. They were able to stop the purchase because he caught it the day it happened and no harm done, except now he gets all new cards and passwords FOR EVERYTHING. They said if he would have not caught it that day, it would have gone through and he would have to go through a claim process to get it back. He is now a member of Lifelock.