Online Threat Alerts (OTA) - Alerting you to scams and frauds.

PayPal Login Scam Email and Text Messages
PayPal Login Scam Email and Text Messages

A common PayPal login scam involves phishing emails or texts that claim your account has been limited, suspended, or has suspicious activity to trick you into entering your credentials on a fake website. Scammers also use fake invoices or "payment received" notifications to lure you into clicking malicious links or calling fraudulent support numbers.

PayPal Scam Tactics

  • Phishing Alerts: Emails with subjects like "Your account is about to be suspended" or "Suspicious activity detected" create a false sense of urgency.
  • Fake Invoices: Scammers send real PayPal invoices for products you never bought, including a fake customer service number in the "notes" section to bait you into calling them.
  • Generic Greetings: Legitimate PayPal emails will always address you by your first and last name, never "Dear User" or "Hello PayPal Member".
  • Profile Setup Scams: Sophisticated scams may use legitimate-looking "Set up your account profile" emails to trick users into adding a scammer as a secondary user.
  • Remote Access: Fraudsters may claim they need to "fix" your account and ask you to install software like AnyDesk or TeamViewer, which gives them full control of your computer.

Protect Yourself

  • Verify Directly: Never click links in an email. Always type paypal.com directly into your browser or use the official app to check your account status.
  • Enable 2FA: Use two-factor authentication (MFA) to add an extra layer of security, making it harder for scammers to log in even if they have your password.
  • Check the Sender: Verify the sender's full email address, not just the display name. Authentic PayPal emails often have a checkmark next to the logo in supported inboxes.
  • Report Suspicious Content: Forward any suspicious emails to phishing@paypal.com and then delete them.

If You've Been Scammed

  1. Change Passwords: Immediately update your PayPal password and any other accounts that share the same login.
  2. Contact Your Bank: Notify your financial institution if you provided bank or card details.
  3. Report the Incident: Use the official PayPal Resolution Center to report unauthorized transactions or fraudulent activity.
waiting