PayPal phishing emails and text scams
Last verified:
Scammers send emails or texts claiming to be PayPal about account limitations, suspicious payments, or refunds. Messages link to fake login pages to capture credentials or payment details. PayPal advises forwarding suspicious messages to phishing@paypal.com without clicking links.
- Impersonated brand
- PayPal
- Scam type
- Phishing
- Common delivery methods
- Email, SMS / text message, Website
How this scam works
You receive an email or text that appears to be from PayPal. It may reference an unauthorized payment, account restriction, or invoice you do not recognize. The message urges you to sign in through a link to resolve the issue. The link typically leads to a phishing site that mimics PayPal’s login page. Scammers may use stolen credentials to send money or make purchases. Some versions include fake invoices or payment requests through compromised accounts.
Warning signs
- Generic greetings instead of your name or account details you expect.
- Links that do not go to paypal.com when inspected carefully.
- Urgent threats that your account will be limited unless you act immediately.
- Unexpected invoices or money requests from unknown senders.
- Attachments you did not request.
- SMS messages with links — PayPal asks you to forward suspicious texts rather than click.
How to verify safely
- Do not click links or call numbers in the message.
- Open the PayPal app or type paypal.com yourself to review activity.
- Check whether the alert appears in your PayPal message center when signed in officially.
- Forward suspicious emails to phishing@paypal.com per PayPal guidance.
- Forward suspicious texts to phishing@paypal.com following PayPal’s instructions.
If you received this message
- Do not enter your PayPal password on pages opened from the message.
- Do not approve login prompts you did not initiate.
- Enable two-factor authentication on your PayPal account.
- Delete the message after forwarding it to PayPal.
If you already clicked or paid
- Change your PayPal password immediately if you signed in on a fake site.
- Review recent transactions and linked funding sources.
- Contact PayPal through official help channels if unauthorized transfers occurred.
- Notify your bank if a linked card or bank account was used fraudulently.
Official reporting guidance
- Forward suspicious emails to phishing@paypal.com.
- Forward suspicious texts to phishing@paypal.com (see PayPal instructions).
- Report to ReportFraud.ftc.gov.
- File with ic3.gov if you lost money or shared credentials.
Check a suspicious link
Paste a URL into Fraudly’s free checker for a structured trust review. Results are informational — not a guarantee.
Open free checkerAuthoritative sources
Fraudly resources
Related local alerts
- ActiveSMS phishing (smishing)
USPS smishing scam
Criminals send texts or emails claiming a USPS package could not be delivered, an address is incomplete, or a fee is owed. The messages are typically designed to steal payment details or personal information through fake tracking links. U.S. Postal Inspection Service guidance warns that unexpected delivery problem messages with links are a common smishing pattern — verify through usps.com rather than the message.
Impersonated brand: United States Postal Service (USPS)
Last verified:
- ActiveSMS phishing (smishing)
Toll road text scam
Scammers send texts claiming you owe unpaid tolls through programs such as E-ZPass, FasTrak, or SunPass. Messages may threaten late fees or registration suspension and link to phishing sites. FCC consumer guidance warns that legitimate toll agencies generally do not demand immediate payment through unsolicited text links.
Impersonated brand: E-ZPass, FasTrak, SunPass, and other U.S. toll programs
Last verified:
- ActiveGovernment impersonation
IRS impersonation scam
Scammers impersonate the IRS through email, text, social media messages, and phone calls. They may claim you owe tax, must verify an account, or are due a refund — often with links or QR codes to fake IRS sites. According to IRS guidance, the IRS does not initiate contact by email, text, or social media to demand payment or sensitive information.
Impersonated brand: Internal Revenue Service (IRS)
Last verified:
PayPal sends legitimate account and transaction notifications. This alert describes impersonation and phishing. Fraudly cannot confirm whether a specific PayPal message is genuine.
Related Fraudly resources
- Stay Safe OnlineClear answers on website trust, phishing, fake shops, and safer payments—tied to Fraudly’s checkers.
- Website scam checkerRun a free URL check for trust signals, scam patterns, and plain-language risk context.
- Latest checksBrowse recent public website trust snapshots from the Fraudly community feed.
- Intelligence HubEditorial guides on fake webshops, phishing, and warning signs before you pay or log in.