Is the PayPal payment real? How to check "you've been paid" and account alerts.

PayPal impersonation scams target buyers and sellers in different ways, but they share the same goal: get you to act on a message before you check what's actually happening in your account. A seller might receive an email insisting that a payment is being held until the item ships. A buyer might get a "your account has been limited" warning, an invoice for something they never ordered, or a payment request with an urgent phone number attached. PayPal itself warns that criminals routinely spoof payment confirmations, suspension notices, and invoices, and the fix is always the same: verify inside the official app or account, never by replying to the message or clicking the link it contains.

What makes PayPal a popular target for impersonation is that it sits between buyers, sellers, and their bank accounts, so a convincing message about money can trigger action fast — sellers want to get paid, buyers want to avoid losing an item they already paid for, and both groups are used to receiving legitimate transactional emails from the service regularly.

The fake "payment received" scam

A criminal claims to have bought an item and sends a convincing but entirely fake payment confirmation, sometimes saying the funds are "pending," sometimes claiming they accidentally overpaid and asking for the difference back. If the transaction doesn't appear in your actual PayPal Activity, no payment has been confirmed — don't ship the item and don't refund anything based solely on what an email says.

The "limited account" scam

This version threatens suspension and links to a page built to look identical to PayPal's real login, which then asks for a card number, ID document, or a one-time SMS code after you "sign in." Open the app or type the official address in manually instead of clicking through. A genuine account restriction is always visible directly inside the account itself or the Resolution Center — it doesn't require you to hand over new information through an email link.

Fake invoices and support calls

Some scammers abuse PayPal's real invoicing feature to send a legitimate-looking payment request, then attach an alarming note claiming an expensive purchase was just charged and demanding an urgent call to "cancel" it. The phone number in the note doesn't belong to PayPal — its entire purpose is to get you on a call with a fake support agent. PayPal's own guidance is not to pay the invoice and not to call the number listed in it.

This version is particularly effective because the invoice itself is technically real — it was actually generated through PayPal's system, just by a scammer's account rather than a legitimate business. That's why the email can pass basic authenticity checks while the "problem" it describes and the phone number attached to it are entirely fabricated.

Warning signs

• A generic greeting or an artificially urgent tone
• A link or domain that isn't actually PayPal's
• A request for your password, a one-time code, a card number, or an ID document
• A "payment" that only exists in the email, not in your account activity
• Pressure to ship an item before the money actually shows up
• An unfamiliar invoice paired with a "support" phone number
• Any request to pay in cryptocurrency or gift cards

None of these signs need to appear all at once for a message to be worth double-checking. A single request that only exists in an email, with no matching entry in your actual account, is reason enough to stop and verify independently before doing anything else.

What to do

Don't reply to the message and don't click anything in it. Open PayPal directly and check Activity, your notifications, and the Resolution Center for anything matching the claim. If the message is fake, forward it to phishing@paypal.com.

If you already gave up information

Change your PayPal password immediately, along with any other account where you reused it. Turn on two-step verification if it isn't already active. Review the devices and cards linked to your account and remove anything unfamiliar. If you shared banking details, contact your bank directly. Keep the original email, its headers, and screenshots of everything — they're useful if you need to dispute a charge or file a report. If you shipped an item before confirming a payment actually existed, it's still worth documenting the listing, the buyer's messages, and any shipping confirmation, since that record helps if you later dispute the loss with PayPal or your marketplace.

Quick checklist

• Confirm every payment inside official PayPal Activity, never from an email alone
• Never ship an item before the funds actually appear in your account
• Don't call phone numbers listed inside invoices or payment requests
• Treat requests for passwords, codes, or ID documents as a hard stop
• Report suspicious messages to phishing@paypal.com

Selling online regularly makes it worth building this check into your routine rather than treating it as a one-off precaution. A quick habit of confirming Activity before shipping anything costs a few seconds and closes off almost every version of this scam at once, regardless of how the message itself is dressed up.