The Most Common PayPal Phishing Scam
The most widespread PayPal scam in 2026 involves an email claiming you've been charged for something you didn't authorize — often $299, $399, or $499. The email looks exactly like a real PayPal receipt and includes a phone number or link to "cancel the transaction."
This scam has two variations: clicking the link takes you to a fake PayPal login page that steals your credentials, or calling the number connects you to a scammer who walks you through "canceling" the charge while secretly installing remote access software on your computer.
From:
[email protected]Subject: Receipt for your PayPal payment — $499.99
Dear Customer,
You've sent a payment of $499.99 to CryptoMax Investment Ltd.
Transaction ID: 7X2K9-DEMO-8471
Date: April 11, 2026
If you did not authorize this payment, call us immediately: 1-888-555-0147
Or click here to cancel: paypal-cancel-transaction.net
🚨 HIGH RISK — This is a phishing scam
🚩 Fake sender — PayPal only uses @paypal.com
🚩 Fake cancel link — not paypal.com
🚩 Suspicious company name ("CryptoMax")
🚩 Classic panic trigger — large unexpected charge
What to do: Do not click any links or call the number. Log directly into paypal.com to check your actual transaction history.
7 Signs That PayPal Email is Fake
📧
Sender isn't @paypal.com
Real PayPal emails only come from @paypal.com. Check the actual email address carefully — not just the display name.
💸
Large unexpected charge
Scammers pick large amounts ($299-$999) to create maximum panic. The panic stops you from thinking clearly.
📞
Provides a phone number to call
PayPal doesn't put phone numbers in charge confirmation emails. That number connects to scammers.
🔗
Cancel link isn't paypal.com
Always hover over links before clicking. If it doesn't go to paypal.com exactly, it's fake.
₿
Payment to a crypto company
Scammers often name the "recipient" as a crypto investment company — knowing that sounds alarming enough to trigger immediate action.
🖥️
Asks for remote access
If you call the number and they ask to "see your screen" or install software, hang up immediately. This is a major red flag.
⏰
"Act within 24 hours"
Real PayPal transactions don't require you to cancel within a specific time window. Urgency is always a manipulation tactic.
🎁
Asks for gift card refund
PayPal never refunds via gift cards. If the "agent" asks you to buy gift cards to process a refund, it's a scam.
What to Do If You Got a Suspicious PayPal Email
Never click links or call numbers from the email. Instead, open a new browser tab and go directly to paypal.com. Log in with your normal credentials and check your actual transaction history. If there's no unauthorized charge there, the email was fake.
If you did call the number and gave them access to your computer or financial information, contact your bank immediately, change all your passwords, and run a security scan on your device.
What email address does PayPal actually use? ▼
I called the number and gave them access — what now? ▼
Disconnect your internet immediately. Change all your passwords from a different device. Contact your bank. Run a full antivirus scan. Report to the FTC at ReportFraud.ftc.gov.
How do I report a fake PayPal email? ▼
Forward the email to
[email protected]. PayPal's fraud team investigates all reports. Also report to the FTC at ReportFraud.ftc.gov.
Check Other Types of Scams
Also check: general email scams · fake bank texts · fake Amazon messages
Got a Suspicious PayPal Email Right Now?
Free, private, results in 10 seconds. No signup needed.
🛡️ Check an Email — Free
Email content never stored · 3 free checks · No credit card