
You open your email inbox. There is a message from PayPal. The subject line says "You have received a payment" or "Your account has been temporarily limited."
Your heart jumps. You are about to click the link. But you pause. Something feels off. The sender address looks strange. The email calls you "Dear customer" instead of using your name.
Learning how to tell if a PayPal email is fake could save you from having your account stolen, your money taken, or your identity compromised. This guide covers every fake PayPal email sign, real examples, and simple verification methods. It is closely related to the broader guide on signs of a phishing email ; the same tactics apply here. For fast analysis, try the AuthentiLens Phishing Email Checker .
If you notice several of these fake PayPal email signs, do not click anything. Verify first.
This is the most important sign. A real PayPal email comes from an address ending in @paypal.com. A fake email might come from @paypal-security.net or a free email like @gmail.com. Always check the actual sender address, not just the display name.
"Dear customer." "Dear user." Real PayPal emails address you by your full name. If the email does not use your name, that is a major PayPal scam email red flag.
"Your account will be limited in 24 hours." Scammers use urgency to stop you from thinking. Real PayPal emails do not threaten you or create panic.
Always type paypal.com directly into your browser. Never log in by clicking a link from an email.
Hover over the link. Check if the link is suspicious before clicking. Scammers use links like paypal.com.verify-login.net (these are not real PayPal domains).
A real email from PayPal is professionally written. Phishing emails often have typos, odd word choices, or sentences that do not sound right.
"Please confirm your Social Security number." PayPal already has this information. They will never ask you to provide it through an email link.
The email says you have an invoice due for $499.99. Log into your PayPal account directly. If the invoice is real, it will appear in your account. Do not click the link in the email.
Do not open attachments from suspicious emails. They may contain malware. Learn more about how to tell if an email attachment is suspicious.
"Your account will be permanently closed if you do not act now." Real PayPal does not threaten to close your account via email.
If you call, a scammer will answer. Always use the official PayPal customer service number from their website.
Scammers create fake payment emails to make you panic. Check your PayPal account directly. Do not click the link in the email.
Real payment notification emails from PayPal include the sender's name, the amount, and the date. Fake emails are often vague.
The button leads to a fake login page. Do not click buttons in suspicious emails.
You have received real PayPal emails before. You know what they look like. If something feels off, do not click anything. When in doubt, go directly to PayPal's website yourself.
The email appears to come from "PayPal Service" but the sender address is invoice@paypal-services.net. The subject line says "Invoice #8372 from Apple Inc." "You have been charged $499.99. If you did not authorize this payment, click here to dispute." The link goes to a fake login page.
The sender address is security@paypal-alerts.com. The subject line says "Your account has been temporarily limited." "Please verify your identity within 24 hours or your account will be closed." The link goes to a fake login page.
The sender address is payments@paypal-verify.net. The subject line says "You have received a payment of $750.00 from John Smith." "The payment is on hold. Click here to claim your money." The link steals your login credentials.
Never click links in emails claiming to be from PayPal. Always type paypal.com directly into your browser. Never enter your PayPal password after clicking a link in an email. Check the sender address before you trust any email. If an email creates urgency or panic, assume it is a scam. For the full picture of common online scam tactics, including email phishing, see that guide.
Check the sender address. Look for generic greetings. Do not click links. Hover over any link to see the real destination. Log into PayPal directly through the official website.
The email claims you have an invoice due. It creates urgency to pay. It includes a link to a fake payment page. Log into PayPal directly to check if the invoice is real.
Change your PayPal password immediately. Enable two-factor authentication. Check for unauthorized transactions. Contact your bank if you entered credit card information. Report the fake email to phishing@paypal.com.
Never click a link in an email to log into PayPal. Always type paypal.com directly into your browser. This one habit will protect you from almost all PayPal phishing scams.
PayPal phishing emails are designed to look real. They create panic. They want you to click before you think. Do not let them win.
Before you click any link in a PayPal email, pause. Check the sender. Log into PayPal directly through the official website. And when you are unsure, scan it.