Is There a PayPal Scam Going Around? (2026 Security Alert)

Imagine opening your inbox and seeing a PayPal notification claiming you've purchased Bitcoin, renewed a software subscription, or paid hundreds of dollars for something you have never ordered. There's an invoice attached, a transaction number, and even a phone number telling you to contact customer support immediately.

You check the sender's address. It looks familiar. The PayPal logo is there, the formatting looks professional, and the warning sounds serious. Naturally, you start wondering whether someone has accessed your account without permission.

Unfortunately, this type of situation can be more complicated than an ordinary phishing email. Some scammers exploit legitimate PayPal features to make fraudulent instructions look like genuine payment notifications. Others simply imitate PayPal with fake emails, text messages, and phone calls.

But there's an important distinction: receiving a suspicious invoice does not automatically mean you've been charged. Before calling anyone or attempting to cancel a payment, you need to understand exactly what appeared in your account.

Is There a PayPal Scam Going Around Right Now?

Yes. PayPal-themed scams remain a concern in 2026, and consumers should be particularly careful with unexpected invoices, money requests, fake purchase notifications, and customer support impersonation.

One particularly convincing technique involves sending fraudulent instructions through PayPal's legitimate invoicing system. This means a notification can genuinely originate from PayPal even though the message written inside the invoice comes from a scammer.

Other scams use imitation emails, suspicious links, fake customer service numbers, or unauthorized payments to create the impression that something is wrong with your account.

These aren't all the same type of fraud, however. Knowing which situation you're dealing with makes it much easier to protect your money.

How PayPal Scams Work in 2026

1. The PayPal Invoice Scam With a Fake Customer Service Number

This is one of the most confusing PayPal scams because the notification may look surprisingly legitimate.

Scammers exploit PayPal's invoicing and money-request features to send invoices for products or services that recipients never ordered. They may use descriptions involving cryptocurrency, online subscriptions, security software, or expensive purchases.

The invoice itself might contain a message such as:

Your payment has been successfully processed. If you did not authorize this transaction, contact our PayPal Billing Department immediately at the number provided below to request a cancellation.

That message is the trap.

Instead of helping you cancel a payment, the phone number connects you to someone pretending to be a PayPal representative. The scammer may then:

• Ask for your PayPal username, password, or verification code.
• Claim they need to verify your identity or reverse a transaction.
• Ask you to install remote-access software on your computer.
• Trick you into transferring money to another account.
• Use fake refund instructions to obtain your banking information.

Why can this be so convincing? PayPal's actual invoicing system may have generated the notification. A genuine sender address or authenticated email doesn't mean that the invoice description or telephone instructions are trustworthy.

PayPal itself warns about invoices and money requests containing alarming notes that encourage recipients to call fraudulent customer service numbers. You can read its official explanation of invoice and money-request scams.

2. Fake PayPal Purchase Emails and Text Messages

Another common approach involves sending an email or text message claiming that you have completed a purchase you don't recognize.

You might receive a notification saying:

• Your PayPal account purchased Bitcoin.
• An expensive item was ordered using your account.
• Your subscription has automatically renewed.
• A payment has been successfully processed.
• Your account will be restricted unless you verify the transaction.

Getting an email saying I purchased something when I haven't placed an order is understandably alarming. Scammers know this reaction can make people act without checking the details.

Some messages contain a fake View Transaction button that leads to a phishing website designed to steal your login credentials. Others display a telephone number and encourage you to call immediately.

These messages may copy PayPal's branding and use familiar-looking language. However, the sender's display name, logo, and email formatting are not enough to establish authenticity.

3. Small Payment Alerts and Unfamiliar Transaction Notifications

Not every suspicious notification involves a large purchase.

Some publicly reported incidents involve small or unfamiliar transaction activity accompanied by a message that looks like a security warning. The message may tell the recipient to call a number to stop a supposedly unauthorized payment.

The amount is not the most important warning sign. The real danger is the instruction to contact an unfamiliar number or follow unexpected refund procedures.

Remember that a small completed payment and an unpaid invoice are different situations. If you see an actual transaction in your PayPal Activity, report it through the appropriate security or dispute channel rather than treating it as an ordinary invoice notification.

4. Unauthorized Automatic Payments and Subscription Charges

Sometimes the problem isn't a fake invoice at all. You may discover that PayPal has processed an actual payment to a merchant you don't recognize.

There are several possible explanations:

• An old subscription renewed automatically.
• A family member or another authorized user made the purchase.
• You previously approved an automatic payment agreement and forgot about it.
• Your account or payment credentials may have been compromised.

PayPal allows users to authorize merchants to process recurring or automatic payments. These agreements are separate from ordinary unpaid invoices.

Check your automatic payments before assuming every unfamiliar charge is a new PayPal scam. If a merchant or transaction is genuinely unauthorized, report it promptly.

5. Fake PayPal Customer Support Calls

Scammers don't always wait for you to call them. Some contact potential victims directly, pretending to be from PayPal's fraud department.

They may claim your account has been compromised, someone is attempting to withdraw your money, or a payment needs to be reversed.

The caller may already know your name, email address, or other basic information. That doesn't prove they work for PayPal.

Be especially careful if the caller:

• Demands immediate action to protect your balance.
• Requests a one-time verification code.
• Asks you to reveal your password.
• Wants remote access to your computer or phone.
• Instructs you to send money to a supposedly safe account.

Hang up and verify the situation independently through PayPal's official website or app.

What Are People Reporting About PayPal Scams Online?

Public discussions on Reddit and other consumer forums help illustrate why these scams can be difficult to recognize.

Several recurring experiences appear in reports from 2026:

• Unexpected high-value invoices: Users describe receiving invoices for purchases worth hundreds of dollars that they never made.
• Real-looking PayPal notifications: Some recipients report that an invoice email appeared to come from PayPal's legitimate email system, making it difficult to distinguish the genuine notification from the fraudulent instructions inside it.
• Fake cancellation numbers: Users describe suspicious invoice notes telling them to call a customer service number within a short deadline.
• Unfamiliar activity: Other reports involve small transactions, unexpected purchase notifications, or messages suggesting that an account has been compromised.

For example, a May 2026 discussion in the PayPal community described an unexpected $800 invoice and the possibility of a fake customer support number being used to lure recipients into a phone scam.

A March 2026 discussion in the r/Scams community described a small transaction accompanied by an urgent message that appeared to come from PayPal.

These consumer reports are useful examples of how the scam works, but they are anecdotal. They don't establish the total number of victims or prove that every unusual PayPal notification belongs to one coordinated campaign.

The common lesson is simple: don't trust the instructions inside an unexpected payment notification without independently checking your account.

How to Recognize a Fake PayPal Email, Text, or Invoice

Even a convincing message can contain warning signs. Pay attention to what the sender wants you to do rather than relying only on its appearance.

Warning sign	Why it is suspicious	What to do
Unexpected invoice	You are being asked to pay for something you never ordered.	Don't pay. Verify it through your account.
Phone number in an invoice note	A scammer may be trying to direct you to a fake support center.	Don't call the number.
Urgent payment warning	The message pressures you to act before checking the facts.	Take a moment to verify independently.
Suspicious login link	The website may imitate PayPal to steal your credentials.	Open PayPal manually instead.
Unexpected remote-access request	The caller may be trying to control your device.	Never grant remote access to an unsolicited caller.
Unrecognized completed payment	There may be an actual unauthorized transaction.	Report it through the Resolution Center.

Also, remember that the sender's address isn't the only thing you should check. A notification generated by PayPal can contain a scammer-written invoice note.

Conversely, a message that simply displays PayPal's name in its sender field may be a completely fabricated email.

When something feels unusual, verify it from your account instead of trying to prove the email is genuine.

What to Do If You Receive a Suspicious PayPal Email, Text, or Invoice

Found an unfamiliar payment notification? Don't panic. Follow these steps before taking any action.

Step 1: Don't Call, Click, or Pay

Ignore any telephone number, suspicious website, or payment instructions included in the message.

Don't:

• Call a number written in an invoice description.
• Click unexpected payment or cancellation links.
• Open suspicious attachments.
• Download software requested by an unknown caller.
• Send money to reverse or cancel a supposedly unauthorized payment.

PayPal will not require you to contact a telephone number hidden in an invoice note to protect your account.

Step 2: Check Your PayPal Account Directly

Open a new browser window and manually enter paypal.com, or use the official PayPal app.

After signing in, check your Activity section and look for the transaction in question.

Pay attention to the difference between these two situations:

• Unpaid invoice or money request: Someone is asking you for money. Receiving the request alone does not mean your bank account or PayPal balance has been charged.
• Completed payment: Money has actually moved. You need to investigate the transaction and report it if you didn't authorize it.

PayPal invoices require the recipient to go through the payment process to complete a purchase. An unpaid invoice is not the same as an automatic withdrawal.

If the invoice is unfamiliar, use the available reporting option inside PayPal. Don't pay it simply to make the notification disappear.

Step 3: Review Your Automatic Payments

If you find an actual unfamiliar subscription or recurring charge, check which merchants have permission to charge your account.

1. Log in to PayPal through the official website.
2. Open Settings.
3. Select Payments.
4. Look for Automatic Payments or Subscriptions and saved businesses.
5. Review the merchants and billing agreements listed.
6. Cancel an agreement you no longer recognize or want, after checking its details.

The wording and menu arrangement may differ depending on your account and PayPal's interface.

Canceling an automatic payment agreement prevents future payments under that agreement. It does not automatically refund a charge that has already been completed.

Step 4: Report the Suspicious Message to PayPal

Don't simply delete every suspicious message without reporting it.

For suspicious emails and text messages that appear to come from PayPal:

• Forward the entire suspicious email to phishing@paypal.com.
• PayPal also accepts forwarded suspicious SMS messages at the same address.
• After reporting, delete the suspicious message and block the sender where appropriate.
• If you are in the United States, you can also forward unwanted scam texts to 7726 (SPAM), as recommended by the Federal Trade Commission.

If you received an unwanted invoice or money request inside your PayPal account, report it through the account itself.

Step 5: Report an Unauthorized Transaction

If you find an actual payment you didn't make, don't treat it as an ordinary invoice scam.

1. Open PayPal's Resolution Center.
2. Select Report a Problem.
3. Choose the suspicious completed transaction.
4. Select the option for unauthorized activity.
5. Follow the instructions and provide any requested information.

Contact your bank or card issuer immediately as well, especially if your linked funding source shows an unfamiliar charge. Ask them to review the transaction and explain the available options for protecting or disputing the affected account.

Step 6: Strengthen Your PayPal Account Security

Even when you haven't lost money, an unexpected security notification is a good opportunity to review your account protection.

• Change your password: Use a strong, unique password that you don't share with other websites.
• Enable two-step verification: Use an authenticator app if the option is available for your account.
• Protect verification codes: Never share one-time codes with someone who contacts you unexpectedly.
• Review account activity: Check for unfamiliar devices, transactions, or account changes.
• Secure your email: Your email account is important because it may be used to reset your PayPal password.

Already Called a Fake PayPal Number? Here's What to Do

Calling a suspicious number doesn't automatically mean your account has been compromised. The important question is what happened during the conversation.

If you called but didn't share information:

• End the call and block the number.
• Don't respond to follow-up calls or messages.
• Check your PayPal Activity for unusual transactions.
• Report the suspicious invoice or message.

If you shared your password, verification code, or banking information:

1. Use a different, trusted device to change your PayPal password.
2. Change your email password and any other passwords that were reused.
3. Contact PayPal through its official Help Center.
4. Contact your bank or card issuer and explain which information was exposed.
5. Review recent transactions and report anything you don't recognize.

If you installed remote-access software or allowed someone to control your device:

1. Disconnect the affected device from the internet to stop the remote session.
2. Do not perform banking or account recovery on that device until it has been checked and secured.
3. Remove the remote-access software and have the device checked for unwanted programs or other changes.
4. Use a separate, trusted device to change your passwords and contact your financial institutions.
5. Monitor your bank accounts and report unauthorized transactions immediately.

Acting quickly is important because a fake support representative may try to use the information you provided before you have time to secure your accounts.

Will PayPal Give Me My Money Back If I Get Scammed?

Possibly, but a refund isn't guaranteed. It depends on how the money was sent, what happened, and whether the transaction qualifies for PayPal's applicable protection or dispute process.

Here's the difference between some common situations:

Situation	What you should do	Refund outlook
You received an unpaid fake invoice.	Don't pay it. Report the request.	No refund is needed because no payment was made.
Someone made an unauthorized PayPal payment.	Report unauthorized activity through the Resolution Center.	PayPal investigates and determines the outcome.
You paid for an eligible purchase but never received it.	Open a dispute through PayPal.	You may qualify for Purchase Protection.
You paid a seller but received something significantly different from the description.	Submit a dispute and supporting evidence.	A refund may be available if the transaction qualifies.
You voluntarily sent money using Friends and Family to a scammer.	Contact PayPal and your funding institution immediately.	PayPal Purchase Protection generally does not cover Friends and Family payments.
You shared banking details with a fake support representative.	Contact your bank or card issuer immediately.	Recovery depends on the payment method and applicable protections.

PayPal Purchase Protection generally applies to eligible purchases when an order doesn't arrive or is significantly different from its description. It does not automatically cover every type of fraud or payment.

Unauthorized transactions are handled through a separate reporting process. PayPal reviews the circumstances and determines whether the transaction qualifies for reimbursement.

If you have lost money, don't wait for the situation to resolve itself. Report it immediately to PayPal and contact the financial institution connected to the payment.

You can also follow the Federal Trade Commission's guide to recovering money after a scam for additional steps involving payment apps, banks, and other financial services.

Frequently Asked Questions

Does PayPal send emails when someone sends you an invoice?

Yes. PayPal can send notifications when someone creates an invoice or money request for your account.

However, that notification doesn't mean you have completed a purchase. Check your account directly before making any payment.

Why did I receive a PayPal invoice if I don't have a PayPal account?

An unfamiliar invoice notification can be sent to an email address even when the recipient doesn't actively use PayPal. The sender may have entered that email address when creating the invoice.

Don't click unexpected payment links or call numbers included in the message. Report suspicious emails to phishing@paypal.com.

Can someone hack my PayPal account with just my email address?

Knowing your email address alone doesn't automatically give someone access to your PayPal account.

However, scammers may use it to send phishing emails, attempt password attacks, or trick you into sharing login credentials. Use a unique password and enable two-step verification.

Does deleting a suspicious PayPal email cancel the invoice?

No. Deleting the notification from your email inbox doesn't necessarily remove the invoice from your PayPal account.

If the invoice appears in your account, report it through PayPal's available reporting options. You don't need to pay an unfamiliar invoice just because it was sent to you.

What if I received an email saying I purchased something but can't find the transaction?

Don't assume the email is proof of a completed purchase. Sign in to PayPal independently and check Activity.

If no matching transaction appears, the message may be a fake purchase notification or an unpaid invoice designed to make you call a fraudulent support number. Don't use the contact information provided in the email.

Smarter Payment Habits Are Your Best Long-Term Protection

Online payment services make shopping, subscriptions, and money transfers easier. Unfortunately, the same convenience gives scammers more opportunities to imitate legitimate businesses and exploit people's trust.

The problem isn't always a fake website or an obviously suspicious email. Sometimes the notification looks genuine, the branding is familiar, and the invoice is delivered through a real payment platform.

That's why checking the sender alone is no longer enough. Build the habit of opening your financial accounts independently, reviewing completed transactions, and contacting customer support through official channels.

And remember: a genuine-looking invoice is not proof that you owe money. An urgent telephone number is not proof that you're speaking with PayPal. When a message tries to rush you into making a financial decision, stop and verify it first.

Your money is worth a few extra seconds of checking.