Fake PayPal Payment Email Scam: Is It Real? How to Tell

Last updated: July 2026

If you’ve had a PayPal email about a payment, invoice, or account problem you don’t recognise, don’t act on the email itself — log in to PayPal separately to check. Genuine PayPal emails address you by your full name and never ask for your password, bank, or full card details. The safest move is to open a new tab, type paypal.com (or use the app), and see whether the payment or alert is really there. If it isn’t, the email was a fake — a scam. Don’t click the email’s links or call any number in it.

Not sure about the email in front of you? Scan it with ScanTheSender for an instant read.

What this scam looks like

Fake PayPal emails come in two main forms:

• “Account problem” phishing. The email warns your account is suspended, limited, or needs “verification,” with a link to a fake PayPal login page. Enter your details and the scammer captures your password.
• Fake invoice or money request. You get an invoice or payment request for something you never bought — sometimes for crypto or a subscription — often with an alarmist note telling you to “call this number if you didn’t authorise it.” The number leads to a fake support agent who tries to get your login or money.

An illustrative example (a made-up sample, not a real message):

“Invoice #INV-4471: your payment of $649.99 to CryptoTrade Ltd is being processed. If you did not authorise this, call 1-8XX-XXX-XXXX immediately.”

Tricky detail: some fake invoices are created through PayPal’s real invoicing tool, so the email can actually come from a genuine paypal.com address. That’s why “check the sender” isn’t enough on its own for the invoice type — the real tell is that you didn’t buy anything and there’s pressure to call or pay fast.

How to tell if a PayPal payment email is a scam

• It asks for your password, bank details, or full card number. PayPal never asks for these by email.
• It’s an invoice or request for something you never ordered, especially with a note urging you to call a number.
• It creates urgency — “act now or your account will be suspended.”
• The greeting is generic (“Dear Customer”). Real PayPal emails use your full name.
• The link doesn’t go to paypal.com. Hover to check — or better, don’t click at all and log in directly instead.

What to do right now

1. Don’t click links, open attachments, or call any phone number in the email.
2. Verify directly. Open a new tab, type paypal.com (or use the app), and check your account activity and messages. Real invoices and alerts appear there.
3. Don’t pay a suspicious invoice or money request. In your PayPal account you can decline and report it in a click.
4. Report the email. Forward it to phishing@paypal.com, then delete it.
5. If you entered your password on a linked page, change your PayPal password immediately from the real site and turn on two-factor authentication. If you already sent money, check the app to cancel a pending payment, or open a dispute in PayPal’s Resolution Center.

FAQ

Is a PayPal “account suspended” or “verify your account” email real? Treat it as a scam. PayPal doesn’t ask you to confirm your password or account details through an email link. Don’t click it — log in at paypal.com yourself and check your account. If there’s a genuine issue, you’ll see it there.

I got a PayPal invoice for something I never bought — what do I do? Don’t pay it and don’t call any number in the note. Log in to PayPal directly and decline or report the invoice. Some of these come from PayPal’s real system, so the pressure to call is the giveaway, not the sender address.

The email came from @paypal.com — doesn’t that mean it’s genuine? Not always. Scammers can spoof the sender, and fake invoices are sometimes sent through PayPal’s own tools. Judge it by whether you actually made the transaction and whether it pressures you — then verify by logging in directly.

I paid a fake invoice. What now? Check the PayPal app to see if you can cancel a pending payment. If it’s already gone through, open a dispute in PayPal’s Resolution Center right away, and contact your bank or card provider.

Not sure about a PayPal email?

Check a PayPal email free — paste it into ScanTheSender, then log in to PayPal directly to confirm.

Related reading: the same playbook drives the Amazon phishing email scam and the Apple ID suspended scam email.