If you receive a suspicious PayPal message, knowing how to report a fake PayPal email can help protect your account and other users.
This guide explains how to verify the email, report it correctly, and avoid common phishing tactics that target PayPal customers.
What a fake PayPal email is
A fake PayPal email is a phishing message designed to look like it came from PayPal when it did not.
Criminals use these emails to steal login credentials, card details, bank information, or one-time verification codes.
These scams often imitate official branding, copy real-language support notices, and create urgency with messages about account suspension, unusual activity, refunds, or failed payments.
They may also send links to counterfeit login pages or attachments that install malware.
How to recognize a fake PayPal email
Before reporting a suspicious message, check whether it has signs of phishing.
Legitimate PayPal messages usually address you by name or the name on your account and direct you to your account activity rather than demanding immediate action through a random link.
- Sender address uses a lookalike domain or unrelated mailbox.
- Message creates pressure, fear, or urgency.
- Links point to a non-PayPal domain when hovered over.
- Spelling, grammar, or formatting looks off.
- Attachments are unexpected or unnecessary.
- The message asks for passwords, PINs, or verification codes.
One useful habit is to avoid clicking anything in the email.
Instead, open your browser or the PayPal app manually and check for alerts in your account activity.
How to report a fake PayPal email
The fastest way to report a fake PayPal email is to forward the suspicious message to PayPal’s phishing team at [email protected].
After forwarding it, delete the email from your inbox and trash folder to reduce the chance of accidental clicks later.
When you forward the email, keep the original message intact.
Do not alter the subject line, remove headers, or copy and paste the text into a new email unless PayPal specifically instructs you to do so.
Preserving the original format helps security teams analyze sender data, links, and metadata.
If the email claims to involve a payment or account issue, also log in to your PayPal account separately and review your recent activity.
If you see any unauthorized transaction, report it through the Resolution Center and change your password immediately.
Should you report it through your email provider too?
Yes.
In addition to PayPal, report phishing messages to your email provider using the built-in “Report phishing” or “Report spam” feature.
Providers such as Gmail, Outlook, and Yahoo use these reports to improve filters and block future messages from the same sender patterns.
If the email arrived in a corporate inbox, report it to your organization’s IT or security team as well.
Business email environments often need broader filtering rules and user warnings to prevent spread across the network.
What to do before you report the email
Take a few quick steps to protect yourself and preserve evidence.
These actions are useful if you later need to document the scam for your bank, employer, or law enforcement.
- Do not click links, download files, or reply to the message.
- Take a screenshot of the email and sender address.
- Check the full sender details and any hidden reply-to address.
- Open PayPal directly through the official website or app.
- Review your transaction history and security settings.
If you already clicked a link, disconnect from the site immediately and do not enter any login details.
Then change your PayPal password from a trusted device and review connected devices or authorized apps.
How to verify whether a PayPal message is real
The most reliable way to verify a PayPal message is to ignore the email’s links and go directly to your account.
A real notification about a payment, limitation, or refund will usually appear in your account dashboard or activity feed.
PayPal also sends legitimate security notices, but they should never ask you to reveal your password or full financial details by email.
If the message is about a purchase, compare the transaction ID, amount, and merchant name against your actual PayPal activity.
When in doubt, contact PayPal support using the contact options listed on the official website, not any contact information provided in the suspicious email.
Why reporting fake PayPal emails matters
Reporting phishing helps PayPal and email providers identify active scams, block malicious domains, and protect other customers.
The more quickly suspicious campaigns are reported, the faster security teams can remove fake pages and reduce exposure.
It also helps with your own recovery.
A timely report creates a record that can support account disputes, fraud claims, or employer incident reports if the scam appears in a business context.
How to protect yourself after receiving a fake PayPal email
Receiving a phishing email does not mean your account has been compromised, but it is a reminder to strengthen your security.
A few settings and habits can significantly reduce future risk.
- Use a unique, strong password for PayPal.
- Enable two-factor authentication or passkey-based login if available.
- Review your recovery email and phone number.
- Check for suspicious automatic payments or linked accounts.
- Keep your browser, operating system, and antivirus software updated.
Be cautious with emails that mention refunds, subscriptions, account verification, or crypto-related transactions.
These themes are common in phishing because they trigger immediate concern and fast clicks.
Common fake PayPal email scenarios to watch for
Phishers reuse a handful of themes because they work.
Knowing them makes it easier to spot suspicious messages before you interact with them.
- Fake invoice or payment receipt: claims you were charged and includes a support number or link.
- Account limitation notice: warns that your account will be frozen unless you confirm details.
- Refund confirmation: says PayPal needs bank verification to release funds.
- Unauthorized purchase alert: urges you to cancel a transaction by signing in through the email.
- Security update request: asks you to verify your identity or reset credentials immediately.
Each of these can be manufactured with branding copied from real PayPal notices.
The safest response is to verify everything directly from your PayPal account rather than trusting the email alone.
Where to report phishing if the scam is part of a larger attack
If the fake PayPal email is tied to identity theft, a compromised device, or financial loss, additional reports may be appropriate.
Depending on your country, you can contact your national fraud reporting center, consumer protection agency, or local law enforcement.
If the email impersonates a business or targets employees, preserve the message headers and alert your security team so they can trace delivery patterns.
In some cases, the domain used in the phishing attempt may also be reported to the registrar or hosting provider.
Keeping records of the sender address, date received, screenshots, and any resulting unauthorized activity can help investigators and support teams assess the scope of the fraud.
Quick checklist for reporting a fake PayPal email
- Do not click any links or attachments.
- Forward the email to [email protected].
- Report it to your email provider as phishing.
- Check your PayPal account directly for real activity.
- Change your password if you interacted with the message.
- Enable stronger account security settings.
Using these steps consistently makes it easier to respond calmly when a suspicious email arrives and reduces the chance of falling for a PayPal phishing attempt.