Upgrade
Account phishing

PayPal account phishing

A fake PayPal email warns that your account is limited, or that an unexpected payment went out, and pushes you to 'log in' through a link.

Example of a scam message
PayPal: Your account has been limited due to unusual activity. Log in within 24 hours to restore access: http://paypal-secure-login.com

How it works

The email mimics PayPal branding and creates alarm — your account is restricted, or money has left it. The link leads to a fake login page that captures your email and password, giving scammers access to your real account.

Warning signs

  • An email about a payment or 'limitation' you didn't expect
  • A login link that isn't on paypal.com
  • Generic greetings instead of your name
  • Threats that your account will be closed unless you act now
  • Attachments or 'invoices' you didn't request

What to do

  • Don't click the link — open the PayPal app or type paypal.com yourself
  • Check your account and notifications directly
  • Forward phishing emails to spoof@paypal.com
  • Turn on two-factor authentication on your account

Frequently asked questions

How do I check if a PayPal email is real?
Don't trust links in the email. Log in to PayPal directly through the app or by typing paypal.com — genuine alerts and any required actions also appear inside your account.