LIVE: New phishing campaigns targeting mobile users —View latest threats →

Back to Threats
High🎣 Phishing

PayPal Phishing Emails

Fake PayPal emails claiming your account is limited or a payment failed trick users into entering credentials and card details on convincing lookalike sites.

Published: 10 March 2026Last updated: 15 January 2026

What Is This Threat?

PayPal is consistently one of the most impersonated brands in phishing. Attackers send emails that look identical to official PayPal notifications, claiming your account has been limited, a suspicious payment was made, or you need to confirm your identity.

How It Works

  • You receive an email that looks exactly like PayPal — correct logo, colours, footer links.
  • A message warns: "Your account has been limited", "Unusual activity detected", or "You've received $250 — confirm your account to claim it."
  • You click the link and land on a pixel-perfect fake PayPal login page.
  • After entering your email and password, the site asks for your card details, billing address, and even national ID "for verification".
  • All data is sent to attackers. Your real PayPal account and linked bank card are now compromised.

    • Real Examples

  • Emails with subject "Your account access has been limited" with a spoofed service@paypal.com sender.
  • Fake payment notifications: "John sent you $500 — log in to accept."
  • Fake security alerts demanding you verify your phone number.

    • Red Flags

  • Hover over any link — it does NOT go to paypal.com.
  • Urgency: threats to permanently close your account.
  • Asks for full card number, CVV, or SSN inside the email flow.
  • Greeting says "Dear Customer" instead of your real name.
  • Sender address is something like service@paypal-secure-login.com.

    • How to Protect Yourself

    • Never click links in PayPal emails — go directly to paypal.com by typing it yourself
    • The real PayPal always addresses you by your first and last name, never "Dear Customer"
    • Enable two-factor authentication on your PayPal account
    • Use a password manager — it will refuse to fill credentials on fake domains
    • Check your actual PayPal account for any alerts before acting on any email

    What to Do If Affected

    1. 1.Do not enter any data — close the tab immediately
    2. 2.If you already entered your password, go to paypal.com and change it immediately
    3. 3.If you provided card details, contact your bank to freeze the card
    4. 4.Check your PayPal transaction history for unauthorised payments
    5. 5.Report the phishing email to phishing@paypal.com
    #PayPal#phishing#email#payment#credentials