Back to blog
August 31, 2026· By GoCheckAI

PayPal Scam: 7 Common PayPal Scams and How to Avoid Them

PayPal is one of the most impersonated brands in phishing. Learn the seven most common PayPal scams, how to spot them, and how to protect your account.

PayPal Scam: 7 Common PayPal Scams and How to Avoid Them

PayPal is one of the most impersonated brands in phishing — because people trust it and use it constantly. PayPal scams usually aim to either steal your login or trick you into sending money through a method that can't be reversed.

1. Fake "account limited" emails

An email claims your PayPal account is limited and asks you to "verify" your details via a link. The link goes to a fake PayPal login page. Real PayPal emails address you by name and never ask for your password. Always open the PayPal app or site directly.

2. "You received money" / "You sent money" fake notifications

A message claims you received or sent money you don't recognize, with a link to "view details." It's a phishing link. Log in to PayPal directly to check.

3. Friends & Family scam

A buyer on a marketplace asks to pay you via PayPal "Friends & Family" (which has no buyer protection) instead of "Goods & Services." If something goes wrong, you have no recourse. Always use Goods & Services for selling.

4. Overpayment scam

A buyer "accidentally" overpays and asks you to refund the difference. The original payment is fraudulent and will be reversed — but your refund is real and lost.

5. Fake PayPal support on social media

Scammers pose as PayPal support on Twitter/X or in comments, asking you to DM your details or call a fake number. Use only paypal.com or the in-app help.

6. Invoice scam

You receive a real-looking PayPal invoice for something you didn't buy, hoping you'll panic and call a fake support number. Don't call it. Report the invoice in PayPal.

7. Refund / "extra refund" scam

A scammer pretends to refund you but "accidentally" sends more than intended and asks for the difference back — often combined with remote access.

How to stay safe

  • Never log in through a link in an email or message — go to paypal.com directly.
  • Never share your OTP or password with anyone.
  • Use Goods & Services for buying and selling, not Friends & Family.
  • Check messages in the PayPal app, not via email links.
  • Check suspicious messages with the GoCheckAI checker.

If you were scammed

  1. Report it in the PayPal Resolution Center as soon as possible.
  2. Contact your bank if a linked card was charged.
  3. Change your PayPal password and enable 2FA.
  4. Report to the FTC (US) or CAFC (Canada). See country guides.

Get a personalized action plan and read how to recover money from a scam and phishing scam.

Related guides

Important

This article is for general informational purposes only and is not legal, financial, or professional advice. GoCheckAI is an independent platform and is not affiliated with any government agency. Always report crime to official authorities in your country.

High Risk of Recovery Scam

Scam victims are often targeted again by fake “recovery agents.”

  • Anyone claiming “We can recover your money for a small upfront fee” is almost certainly a scammer.
  • Recovery is never guaranteed. No legitimate service charges an upfront fee to retrieve stolen funds.
  • Scammers buy victim lists — expect fake “hackers”, “officials”, and “lawyers” to contact you.

Been scammed? Get your action plan

A clear, prioritized recovery plan in minutes.

Get my action plan