Their solution is to hardcode a filter that rejects the email if “To:” contains “onmicrosoft.com” and comes from PayPal, this is a very short-term solution, tomorrow it could be a Google Group for example, or directly the target of the scam