How can I tell if an email is genuinely from PayPal?
Fake emails, also known as 'phishing' or 'spoof' emails, attempt to trick you into revealing personal or financial information such as bank account details, credit card details and passwords etc. These fake emails often link to fake (spoof) websites where your information can be collected if you type it.
You’ll know that an email is not from PayPal when:
- It begins with a generic greeting like ‘Dear user’ or ‘Hello, PayPal member.’ We'll always begin with your first and last name or the business name on your PayPal account.
- It asks for financial and other personal information. Our emails will never ask for your bank account number, debit or credit card number etc. We'll never ask for your full name, your account password, or the answers to your PayPal security questions in an email.
- It asks you to provide the tracking number of a dispatched item, before you've received the payment into your PayPal account.
- It includes a software update to install on your computer.
Here are some security tips to help you stay protected online:
- Even if a URL contains the word 'PayPal', it may not be a PayPal webpage.
- When using PayPal, always ensure that the URL address listed at the top of the browser displays as https://www.paypal.com/. The 's' in ‘https’ means the website is secure.
- Look for the 'lock' symbol that appears in the address bar. This symbol indicates that the site you're visiting is secure.
If you think you’ve received a phishing email, forward it to firstname.lastname@example.org (so we can investigate) and then delete the fake email from your mailbox. If you‘ve responded to a fraudulent email and believe your PayPal account may now have been accessed, you should report the unauthorised access immediately.
- If you provided any personal information in response to a phishing email or on a spoof website, change your Password and Security Questions immediately.
- If you provided any financial information, contact your bank and your credit card issuer and tell them about the situation.
- Review your PayPal payment and transfer activity to check that you recognise all recent activity.
Here's a video on identifying suspicious mails: