Online Threat Alerts (OTA) - Alerting you to scams and frauds.
PayPal Scam Email - How to Protect Yourself

PayPal scam emails often impersonate the company to steal login credentials or financial information through phishing links, fake invoices, or urgent alerts about "unauthorized charges". Key red flags include generic greetings (e.g., "Dear user"), urgent demands to act, and requests to call fake support numbers. Never click links or call numbers in suspicious emails; log in directly at PayPal.com to verify activity.

Common Scam Tactics

  • Fake Invoices/Money Requests: Scammers send invoices for products you didn't order, often for cryptocurrency or electronics, urging you to call a support number to cancel.
  • "Account Suspended" or "Unauthorized Charge" Phishing: Emails claiming your account is limited or a transaction has been made, guiding you to a fake login page to steal credentials.
  • Advanced Phishing (Spoofed Emails): These may appear to come from legitimate PayPal addresses, often instructing users to call a fake "fraud department" to discuss fake charges.
  • Unexpected "Reward" Emails: Claims that you have won a prize or received a coupon, requiring you to click a link to claim it.

Identifying a Fake Email

  • Sender Address: Look beyond the displayed name; check the actual email address for discrepancies, such as using a ".net" or "Gmail" address.
  • Greeting: Official PayPal emails usually use your first and last name, not generic greetings like "Dear user" or "Hello, PayPal member".
  • Urgency: Scams create a sense of fear, insisting you take action immediately to avoid account closure.
  • Attachment/Links: Never open attachments or click links. Hover over links to see where they actually lead, which often will not be a paypal.com URL.

Protect Yourself

  • Check Directly: If you receive a suspicious alert, ignore the email and log in via the official website or app to check your actual Activity Page.
  • Report Suspicious Activity: Forward suspicious emails to phishing@paypal.com, then delete them.
  • Enable 2FA: Set up two-factor authentication to provide an extra layer of security.
  • Use Official Support: Never call a number provided in a suspicious email or text message.