We've written a lot about how scammers are using PayPal for BEC 3.0 scams. This means tat hackers are sending invoices directly from PayPal, not a spoofed site. That means it will sail past most security services and trick end-users. We put together a breakdown of what these scams look like in the real-world: