Online Threat Alerts (OTA) - Alerting you to scams and frauds.

Is There a PayPal Scam Going Around? April 2026

Is There a PayPal Scam Going Around? April 2026

There are PayPal scam emails claiming recipients authorized a payment to Coinbase. It tricks them into calling a fake support number to "cancel" the charge, aiming to steal credentials or financial information. Do not call the number, click links, or pay; check your account directly via the PayPal app.

Scam Samples

Coinbase PayPal Scam Email
Coinbase PayPal Scam Email

Key Aspects

  • Realistic Invoices: Scammers send invoices via service@paypal.com, making them hard to identify as fake.
  • "Refund" Hook: The email usually claims an unauthorized charge (e.g., "$3544" or similar high amount) was made for a service like "Bitcoin," "Geek Squad," or "Walmart".
  • The Goal is a Call: The invoice includes a fake phone number to call for a cancellation or refund. If you call, fraudsters try to steal financial information, remote access to your computer, or two-factor authentication codes.
  • Impersonation: The name "Julie Haas" or similar variations (e.g., Sandra Bermon) may be used to create a false sense of a real business.

Protect Yourself

  • Do Not Call: Never call the phone number listed in a suspicious PayPal invoice or email.
  • Check Directly: Log in to your PayPal account via the official app or website to verify transactions. If it's not there, it is a scam.
  • Report: Forward suspicious emails to phishing@paypal.com and delete them.
  • Ignore Generic Greetings: Be wary of emails that use greetings like "Dear Customer" instead of your name.

If you have already engaged with them, report the incident to PayPal immediately and secure your account by changing passwords and monitoring for fraudulent activity.

More From OTA

Check the comment section below for additional information, share what you know, or ask a question about this article by leaving a comment below.

Comment sectionComments / Answers

To protect your privacy, please remove sensitive or identifiable information from your post. Your IP address will be used to display your estimated location in your post.

waiting

CommentsPost Comment / Answer