PayPal Inc scam emails, texts and calls: how to spot the fake
Quick answer
A message from "PayPal Inc" that says your account is suspended or you have an unfamiliar charge, and tells you to click a link or call a number, is a scam. Log in to PayPal by typing the address yourself, and forward the email to phishing@paypal.com.
- Comes by
- Email, Text, Phone call
- Pretends to be
- PayPal
- Last updated
How it works
Scammers pretend to be PayPal. The email or text says your account is about to be suspended, or that there's a payment you don't recognise, and pushes you to act quickly.
A link leads to a fake PayPal login that captures your password. A number connects you to a fraudster: PayPal notes that calling a number from a text also confirms that you have a PayPal account. On a call, the scammer may ask for passwords or validation codes.
A related trick targets sellers. A fake notice says you've been paid, or overpaid, so you ship goods or send money back before checking your account. PayPal says to log in and check your activity before shipping anything.
Red flags
- A generic greeting: PayPal says its emails address you by your full name or business name
- Threats that your account will be suspended unless you act now
- A link whose address isn't PayPal's, or an attachment (PayPal says its emails never include one)
- A text or call asking for your password or a validation code
- A payment notice that tells you to ship an item or refund an overpayment
- A "PayPal" caller whose number can be faked
Example message
PayPal Inc: unusual activity detected. Your account has been limited. Confirm your details at [link] within 24 hours or call [phone number] to avoid suspension.
What to do
- 1
Don't click, call or reply
Open PayPal by typing the address into your browser or using the app, and check your notifications there.
- 2
Forward the email to PayPal
Forward the whole email (don't copy and paste it) to phishing@paypal.com, then delete it. For a text, forward a copy to the same address and block the sender.
- 3
Check before you ship or refund
If someone says they paid or overpaid you, check your PayPal activity first. Don't send money back to a stranger.
- 4
If you entered your details
Change your PayPal password, then your email password and any account that reused it. Turn on two-step verification.
- 5
Review your account
Look through your recent transactions for anything you don't recognise and report it through PayPal's Resolution Centre or help pages.
- 6
If you paid someone
Contact your bank or card issuer straight away and tell them it was fraud.
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
Scammers rarely guess. Names, phone numbers, email addresses and home addresses are sold by data brokers, listed on people-search sites such as Spokeo, and leaked in breaches, which is how a message can reach you with your name already on it. Serus finds the brokers that list you and removes your listings, and alerts you when your details turn up in a breach, so fewer scammers can build a convincing message about you. If you've already shared details, our guide on what to do after a data breach covers the next steps.
More PayPal scams
Frequently asked
Is a PayPal Inc email a scam?
If it threatens suspension, asks for your password or tells you to call a number, treat it as one. PayPal says its genuine emails address you by name and never include attachments.
Does PayPal call about account problems?
PayPal says caller ID can be spoofed and that it won't ask for passwords or validation codes on a call you didn't start. Hang up and contact PayPal through its help centre.
What if I called the number in the text?
Don't give any details. If you did, change your password and check your account activity, then contact PayPal through its official help pages.
Is PayPal the scammer?
No. Scammers pretend to be PayPal. PayPal is the company being impersonated.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
