How to identify a PayPal scam email and stay safe

If you’ve received an email claiming to be from PayPal and it doesn’t feel right, it might be a scam. PayPal scam emails are one of the most common types of phishing attempts, designed to trick you into handing over personal information or clicking unsafe links. Knowing how to recognize and respond to these emails is key to keeping your family and finances safe. Here, we break down what a PayPal scam email looks like plus what you should do if you think you’ve received one. 

What is a PayPal scam email?

A PayPal scam email is a fraudulent message that looks like it came from PayPal but is actually from scammers. These emails often:

• Warn of suspicious activity on your account

• Claim your account is locked or requires verification

• Ask you to click a link to “fix” an issue

• Use logos, colors, or formatting that mimic real PayPal communications

While these emails may look convincing, their goal is to steal your login details, financial information, or even infect your device with malware.

#1 family finance and safety app

#1 family finance and safety app

Teach your kids and teens to earn, save, and invest with Greenlight.

Use code GLBLOG for one month, on us.*

Try Greenlight today

Common signs of a fake PayPal email

Be on the lookout for these signs of a PayPal scam email. 

1. Urgent or threatening language

Scammers try to pressure you by saying things like “Immediate action required” or “Your account will be suspended.”

2. Suspicious email addresses

Real PayPal emails come from @paypal.com. Be cautious of lookalike addresses such as paypal@secure-mail.com.

3. Poor spelling and formatting

Official PayPal messages are usually well-written. If you receive an email with multiple typos or awkward phrasing, these are strong red flags that the email isn’t actually from Paypal.

4. Strange links or attachments

Scam emails may include links that look legitimate but actually redirect to a fake site. Hover over the link (without clicking) to check the real URL. If it doesn’t direct to an official Paypal page, then it’s likely a scam.

5. Generic greetings

PayPal will usually address you by your first and last name. Messages that start with “Dear Customer” or “Hello user” should raise suspicion.

What to do if you receive one

If you’ve determined that the email you’ve received is likely to be a scam, here are a few things you can—and should—do to keep your accounts and devices safe. 

1. Don’t click any links or open attachments.

2. Report it by forwarding the email to phishing@paypal.com.

3. Delete the email from your inbox and trash folder.

4. Check your PayPal account by going directly to paypal.com, never through the email link.

If you accidentally clicked a link or shared personal information, change your PayPal password immediately and contact PayPal support.

Protecting your family from phishing scams

These scams don’t just target adults. Teens and kids who are new to online shopping or money apps may be especially vulnerable. Teaching safe online habits, like double-checking senders and never sharing passwords, can help them avoid mistakes.

With Greenlight, the #1 family finance and safety app, you can access family identity theft protection** for everyone in your family. And, with Greenlight Family Shield, you can get additional protection for senior loved ones*, including fraud and suspicious activity alerts**, financial account monitoring**, and up to $1M in identity theft protection.*** 

Beyond PayPal: Look out for scams everywhere

Paypal isn’t the only email scam you may encounter. Phishing emails can come from scammers pretending to be Amazon, your bank, or even a delivery company. The same safety rules apply: Slow down, double-check everything, and when in doubt, go directly to the official site.

Protect your $ and family. Keep everyone's safety and finances in check with Greenlight — the all-in-one educational money app. Try Greenlight, one month, risk-free.†  

This blog post is provided "as is" and should not be relied upon as a substitute for professional advice. Some content in this post may have been created using artificial intelligence; however, every blog post is reviewed by at least two human editors.

*Loved ones refers to covered family members as defined in the policy i.e. supported adults for which you control or assist with their finances.

**Premium monitoring services are offered by Experian.

***Insurance offered by Acrisure, LLC is provided by ACE American Insurance Company and its U.S.-based Chubb underwriting company affiliates. www.chubb.com. Additional details can be viewed here. See link for policy information. Insurance Products are not insured by the FDIC or any federal government agency and are not