I got two notices in the E-mail saying my subscription was running out. I think they were legit, but not sure. It definitely was time to re-subscribe, so I went to the proper area and clicked on using Pay Pal to do it. It went as expected, but a few minutes later I got an E-Mail from Pay Pal that turned out to be a scam.
This one was a Pay Pal statement telling me my money went through, but if I thought there might be a problem, I should check the attached statement. When I opened it, it showed that I had ordered bit coins for $480, and prominently gave me a phone number to call if necessary. No mention of Sawmill or Northwind was on it.
I called the number, and it first just hung up on me. Second call was answered, and the very foreign lady proceeded to read answers from a script for any question asked, although all it amounted to was.. you can cancel but we need more information. I hung up after listening to her baby cry in the background, then googled the phone number of Pay Pal, and it was a completely different scenario.
Pay Pal was all voice recordings, and I never managed to talk to a human.
In the meantime, my bride called the credit card company to report it and see if the $480 went through. It didn't, but the $20 to Sawmill did. They said they get calls about this all the time, and that we were probably OK since we didn't give out any additional info. We will continue to monitor for it.
I hope it was coincidence that I got the scam moments after using Pay Pal to buy something (which only happens a couple times a year), rather than the criminals monitoring Sawmill or Pay Pal somehow.