PayPal account phishing
A fake PayPal email warns that your account is limited, or that an unexpected payment went out, and pushes you to 'log in' through a link.
“PayPal: Your account has been limited due to unusual activity. Log in within 24 hours to restore access: http://paypal-secure-login.com”
How it works
The email mimics PayPal branding and creates alarm — your account is restricted, or money has left it. The link leads to a fake login page that captures your email and password, giving scammers access to your real account.
Warning signs
- An email about a payment or 'limitation' you didn't expect
- A login link that isn't on paypal.com
- Generic greetings instead of your name
- Threats that your account will be closed unless you act now
- Attachments or 'invoices' you didn't request
What to do
- Don't click the link — open the PayPal app or type paypal.com yourself
- Check your account and notifications directly
- Forward phishing emails to spoof@paypal.com
- Turn on two-factor authentication on your account
Frequently asked questions
- How do I check if a PayPal email is real?
- Don't trust links in the email. Log in to PayPal directly through the app or by typing paypal.com — genuine alerts and any required actions also appear inside your account.