The recent PayPal scam is a "phish-free phishing attack" that appears authentic.The scam starts with an email from PayPal's real email address.The attackers utilize PayPal's "Send and Request Money" feature and a Microsoft 365 test domain.The scam is difficult to detect and can result in unauthorized access to PayPal accounts.