@portaloffreedom @killyourfm Came here to say the same thing. I wonder if the "store name" is that whole string including the phone number and warning about deduction from your card/bank …

@XenoPhage @portaloffreedom @killyourfm That's exactly what it is. See the "invited you as a developer" at the end of the subject line. Unfortunately it's not a new technique (I remember reading someone's post on this exact exploit at least several months ago, possibly even longer) which means that PayPal still hasn't fixed it... (You'd think given the sheer amount of "someone put a banned word in the memo" automation they have that they could do something similar to trigger manual review of a store name...)