Skip to content

Companies

PayPal scams: how the fake messages work

A PayPal scam is a fraudulent attempt by cybercriminals to steal money or account credentials by impersonating PayPal through phishing emails, fake invoices, or unsolicited phone calls. Scammers frequently send bogus invoices claiming unauthorized charges to trick victims into calling fraudulent support numbers or clicking malicious links. PayPal never asks for sensitive credentials or passwords over email or phone and advises users to verify all account alerts directly within the official app.

Last reviewed: August 9, 2026  ·  Drafted with AI assistance. Every figure on this page was checked against the source cited for it. Not yet reviewed by a human editor.

ScamPreventionGuide is an independent consumer-protection resource. We are not affiliated with, endorsed by, or sponsored by PayPal. Company names and trademarks are the property of their respective owners and are used here only to identify the companies that scammers impersonate.

01

Is the PayPal message real?

PayPal Holdings, Inc. (Publicly traded on NASDAQ: PYPL)

Digital payment platform services, online money transfer services, digital wallets, credit/debit card processing, peer-to-peer (P2P) payments (PayPal, Venmo, Xoom).

According to Federal Trade Commission (FTC) data released in May 2024, PayPal was ranked as the third-most impersonated company by scammers, with approximately 10,000 consumer reports filed in 2023. Source: New FTC Data Shed Light on Companies Most Frequently Impersonated by Scammers.

02

Which versions are in circulation?

The versions in circulation, and what each one is after:

VersionHow it reaches youWhat it wants
Fake Invoice / Money RequestEmail & AppVictim calls the fake support number where fraudsters pressure them into remote access or bank transfers.
Phishing Account Suspension AlertEmailVictim clicks the malicious link and enters login credentials, credit card details, and 2FA codes on a spoofed phishing portal.
Tech Support Impersonation CallPhoneVictim connects to a fake agent who guides them to install remote-access software (AnyDesk/TeamViewer) and transfer funds to a "safe account".
Micro-Transaction Email TrapEmail & AppVictim contacts the number in the transaction note, falling into a refund scam or tech support trap.
Fake Shipping Fee / Customs NoticeSMS & EmailVictim enters debit card and PIN details into a fake payment portal, enabling unauthorized fraudulent charges.
03

How can you tell a real message from a fake one?

The differences you can check yourself:

  • The message uses an impersonal or generic greeting such as "Dear User" or "Hello, PayPal Member," whereas genuine PayPal emails always address you by your full account name.
  • An invoice or email notification instructs you to call an external phone number listed in the message body or note rather than logging directly into the official app or website.
  • The sender email address displays a free webmail domain or a subtly misspelled domain (e.g., service@paypal-support-update.com instead of @paypal.com).
  • The communication creates extreme panic or urgency, claiming your account will be permanently deleted or charged within minutes unless you act.
  • A money request or invoice originates from an unknown third-party merchant or individual for goods or services you never ordered.
04

What should you do in the first hour?

It depends on how far it got. Find your situation:

  • Do not engage further. Log in independently via https://www.paypal.com or the official mobile app to check your account status. Forward suspicious emails to phishing@paypal.com and delete them.
  • Immediately log into your PayPal account and change your password and security questions. If locked out, use the official account recovery workflow at https://www.paypal.com/us/cshelp/contact-us. Contact your bank or credit card issuer immediately to freeze compromised cards.
  • Go to the PayPal Resolution Center at https://www.paypal.com/disputes/ within 180 days to report unauthorized transactions and dispute the charges. Notify your bank or credit card issuer to initiate a chargeback.
  • Immediately disconnect your computer from the internet (Wi-Fi off / Ethernet unplugged). Run a full offline malware scan using reputable antivirus software. Change all online banking, email, and password manager passwords from a clean, unaffected device. Report the incident to government authorities such as the FTC (https://reportfraud.ftc.gov) or IC3 (https://www.ic3.gov).
05

Where do you report it?

Forward suspicious emails to phishing@paypal.com and report unauthorized activity or unwarranted invoices by logging into the official account or app at https://www.paypal.com/us/security/report-fraud. Customer Service phone: 1-888-221-1161.

Whatever the brand, two official channels take the report. File with the US Federal Trade Commission at reportfraud.ftc.gov, and — if money was lost or a computer was accessed — with the FBI's Internet Crime Complaint Center at ic3.gov. Reporting rarely recovers money on its own; it is what makes the next person's warning possible.

06

Sources