Fake invoices for phony grants target PayPal customers