PayPal scam emails: how to spot fake invoices and phishing messages
Quick answer
Fake PayPal emails and invoices try to get you to log in on a copy of the site or call a number. Don't click links or call numbers in the message. Log in to PayPal directly, and forward suspicious emails to phishing@paypal.com.
- Comes by
- Email, Text, Phone call
- Pretends to be
- PayPal
- Last updated
How it works
PayPal's help pages describe phishing emails and websites that look like PayPal's. They usually claim a problem with your account or a payment, and ask you to follow a link to sign in or confirm details. The page behind the link is a copy, and what you type goes to the scammer.
Invoice and money-request scams work differently. A genuine-looking PayPal invoice or request arrives for something you never bought, often with a phone number to call to "cancel" it. The money request may be real PayPal, but it comes from the scammer.
PayPal says to log in through the PayPal website or app rather than any link or number in a message.
Red flags
- An email about a problem with your account that you didn't expect
- An invoice or money request for something you didn't buy
- A phone number to call to cancel a payment
- A link that asks you to sign in or confirm personal details
- A generic greeting or a sender address that doesn't match PayPal
- Pressure to act right away
Example message
PayPal: an invoice for $[amount] has been paid from your account. If you did not authorize this, call [phone number] to cancel it, or review it at [link].
What to do
- 1
Don't click or call
Leave links, attachments and phone numbers in the message alone.
- 2
Check your account directly
Type the PayPal address yourself or open the app. If there's a real issue, it will show in your account.
- 3
Forward the email to PayPal
PayPal's help pages say to forward suspicious emails to phishing@paypal.com, then delete them.
- 4
Report an unwanted invoice or request
Log in to PayPal and report the invoice or money request from your account.
- 5
If you entered your login, change it now
PayPal advises changing your password and security questions right away. Do the same anywhere you reuse the password. Our guide on what to do after a data breach covers more.
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
A phishing email that uses your real name or the right email address looks much more convincing. Scammers often get both from breaches and people-search sites.
Serus finds where your phone number, address and email are listed on people-search sites and other data brokers and files removal requests, and it alerts you when your details turn up in a breach. That won't stop every message, but it gives scammers less to work with.
Common PayPal scams
- PayPal impersonation scam A message from "PayPal Inc" that says your account is suspended or you have an unfamiliar charge, and tells you to click a link or call a number, is a scam. Log in to PayPal by typing the address yourself, and forward the email to phishing@paypal.com.
-
PayPal payment email scam A fake PayPal email saying a buyer has paid is a scam. Fraudsters push sellers to post the item before checking. Log in to PayPal yourself, check the payment, and forward suspicious emails to report@phishing.gov.uk. - PayPal phishing scam A PayPal email that threatens to suspend your account, greets you with "Dear user" or sends you to log in through a link is phishing. Don't click. Log in to PayPal by typing the address yourself and check the Resolution Center.
- PayPal refund scam If someone "overpays" you on PayPal and asks you to wire back the difference, or an email tells you to call a number about a refund or invoice, it's a scam. Check your PayPal account directly before you ship or send anything.
Frequently asked
Where do I forward a fake PayPal email?
PayPal's help pages direct you to phishing@paypal.com. Forward the whole email, then delete it.
I got a PayPal invoice for something I didn't buy. Is it real?
The invoice may come through PayPal but still be a scam. Don't call any number on it. Report it from your PayPal account.
Is PayPal a scam?
No. PayPal is a real payment service. Scammers pretend to be PayPal or misuse it.
I clicked the link. What now?
Change your PayPal password and security questions, check your activity and report it to PayPal and the FTC.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
