Spot and report fake emails.

Phishing emails are a leading cause of stolen information and identity theft, and they can be hard to spot. Fake emails often look like the real thing so it’s important to stay vigilant online.

Don’t have a PayPal account? Sign up for free

What is phishing?

Phishing emails and hoax websites ask you to click on links, contact them, or open attachments to update your account information, confirm your password or confirm a purchase you haven’t made. When you follow the links, the sites are unsecured, letting the fraudsters collect your login details and/or financial information.

Recognise fakes when you see them.

Phishing scams almost always imitate well-known companies and include company logos, official-looking email templates, or phone call scripts similar to genuine company communications. There are some things to look for that can help you tell the difference.




Voice calls.

Found a fake?

If you’ve received a phishing email or stumbled across a hoax website, even if you’re not sure, forward it to us at and we’ll investigate it. Make sure you forward the email (don’t send it as an attachment) so valuable tracking information about the source stays intact. Once done, delete the email permanently from your inbox – never click any links.

Communicate with PayPal the safe way.

Never share sensitive information by email with anyone, not even PayPal. Always log in at to update your bank or credit card details, email address, password or name, or to provide proof of identity documents like your driving licence.


Always manually enter the PayPal URL into the address bar in your browser.

Use our Help Centre

Visit the Contact or Help link on any PayPal webpage to get in touch.

Use site safety rating tools

Services like WebAdvisor, WOT and Safe Web can alert you before you click.

Be cautious when communicating with others through direct messaging as scammers may attempt to trick you into providing personal information. PayPal users should never share sensitive personal or financial information, for example:

Bank Account Numbers or IBAN, including last four digits

Credit Card Number and CVV/CVV2/PINs


Credit Data or Credit Score

National Insurance Number or VAT number

Account Balance, Credit Balance of any PayPal account or service

Government Issued ID information, for example: Passport, UK Driving Licence, UK Armed Forces Veteran ID Card or National ID Card Numbers

Home address, date of birth, or personal family information

Have you been phished?

There are many clever fakes out there and new ones are being created all the time. So, despite your best efforts, it could still happen to you. If you think you’ve clicked on a fake email, text, or website or provided your secure information to the wrong people, here’s how to protect yourself:

1. Run an antivirus scan on your system to make sure you didn’t pick up any malware.

2. Change all your passwords, PINs, and security questions immediately.

3. Report it to the police, PayPal, your bank, and credit card providers.

4. Keep an eye on your online account statements for unusual activity.

PayPal helps you stay safe online.

Account security

Strong passwords and PINs keep your account safer.

System security

Keep your computer and mobile device secure.

Avoid scams

Watch out for scams and learn to protect yourself.

Be security-smart.

Gosafeonline is a website by the Cyber Security Awareness Alliance of the Singapore Government. It’s a great place to find the latest information about staying safe online and talking to children about internet safety. It also gives guidance for reporting online security incidents.

Get started with PayPal, a safe way to pay.

Sign Up for Free