🛡️ netzmeldung.com
Risk: Elevated

Subscription trap: When NordicaLab automatically charges via PayPal

Category: Banks · Published: 09/09/2026 · Last updated: 10/09/2026

Fraudsters misuse the name of the brand or institution mentioned. The brand or institution itself is not the source of these scam attempts.

Summary

What is this about? Current fraud case, reported by Watchlist Internet. See linked source for details.
Who is affected? PayPal users.
How high is the risk? Elevated

Why is this warning issued?

This warning has been included because it is based on a report from Watchlist Internet. It is intended to protect other users from this scam. The classified risk level is elevated.

How the scam works

  • You use PayPal via the app or browser and, after a transaction, simply close the window or app – no active logout takes place.
  • PayPal remains logged in in the background.
  • Later, a pop-up appears that blocks half the screen – in a hurry or out of habit, you inadvertently dismiss or confirm it.
  • With this click, a paid subscription is unknowingly concluded (for example, the personality test 'testlibrary.com').
  • At the same time, an 'automatic payment' for the subscription is set up in PayPal.
  • Subsequent charges then run automatically through your PayPal account without further consent.
  • You only find out about it through a PayPal notification about the allegedly authorized payment – often well past midnight.

How to recognise it

  • You receive a PayPal notification 'You have authorized a payment' at a time when you definitely did not release a payment (for example, at night).
  • The recipient of the payment is 'NordicaLab' or a company completely unknown to you.
  • Unknown, recurring charges appear on your PayPal account or bank statement.
  • You are lured to an ostensibly free online test (e.g., personality test) that turns out to be a subscription in the fine print.
  • You are sent a payment request by email or post, even though you knowingly never entered into a contract.
  • Request for TAN/PIN/card details
  • Link to a fake login page
  • Urgency or threat of account suspension

How to protect yourself

  • Log out actively after each PayPal use – simply closing the app or browser window is not enough.
  • Enable two-factor authentication with PayPal so that you must consciously confirm each payment with an additional code.
  • Regularly check your PayPal overview and bank statements for unknown recipients or recurring charges.
  • Cancel a discovered subscription in writing with the provider, explain that no valid contract was concluded, and demand your money back.
  • Additionally request a chargeback via PayPal or through your credit card company and deactivate the automatic payment in the PayPal management area.
  • If in doubt, contact your consumer protection center or, in extreme cases, the police.

What you should never do

  • Do not simply pay the unjustified demands – not even if threatened with late fees or legal action.
  • Do not ignore suspicious PayPal notifications; check them immediately and act promptly.
  • Do not confirm any pop-ups or buttons in a hurry or under stress without reading the text carefully.
  • Do not rely on PayPal's 'one-click payment' without an additional security layer.

Frequently asked questions

Do I have to pay the charge if I never knowingly entered into the subscription?

If you were not aware of the contract being concluded, usually no valid contract was formed. You should have the charge reversed via PayPal or your credit card company and cancel the subscription in writing with the provider.

What happens if I do not respond to the demands at all?

Further automatic charges and often messages with reminders or threats up to alleged collection letters are to be expected. Even then, the rule is: do not pay, but stay calm, secure evidence, and seek help from the consumer protection center.

Where did the provider get my data from in the first place?

The data comes from the PayPal session that remained logged in. When the pop-up was accidentally confirmed, personal details may also have been transmitted to the provider.

How do I notice at all that I am affected?

Check your PayPal overview for unknown recipients like 'NordicaLab' and for recurring amounts. A PayPal email 'You have authorized a payment' that does not match your behavior is also a clear warning sign.

Is it enough to cancel the subscription through PayPal?

No, you should also cancel in writing directly with the provider, demand a refund of the amount already charged, and simultaneously request a chargeback via PayPal or your credit card company.

Affected data

Brands
Scam type

Comments

No comments yet. Registered users can share their experiences.

Related warnings

Original source

Find more information in the original source.

Watchlist Internet ↗

Update history

  • 10/09/2026Description updated
  • 09/09/2026Warning added from an official source