How to identify fake messages

An illustration of a fish hook representing phishing email floats above symbols of two envelopes

The likelihood you'll receive a fake message is growing dramatically

#1

most common cybercrime in 20201

241,342

phishing incidents reported in 20201

2X

more frequent incidents in 2020 vs 20191

How to spot a phishing email or text

Generic greetings

Phishing messages often begin with impersonal greetings. “Dear user” or “Hello, PayPal member” are definitely suspect. Messages from PayPal will always use the full name listed in your PayPal account.

Attachments

Attachments can contain malware, so never open them unless you’re 100% sure they’re legitimate.

A sense of urgency

Don’t heed pleas for you to take fast action or warning you of problems that will compromise your account status.2

Fake URL

If the web address is scrambled or looks suspect, don't click on anything and leave.

Asks for sensitive info

Never provide personal, credit card, or account info via email, text, or phone.

Poorly written

Typos, misspellings, and incorrect grammar are common in phishing messages.

Tips for browsing websites

Don’t rely on the “s” in https

One letter used to make a big difference, but now the ”s” doesn’t always mean the site is legitimate because hackers can build encrypted sites, too.

Don’t rely on the padlock symbol

Authentic sites will have this icon in the address bar, but many fake sites do, too.

Type the URL directly yourself

Phishers create fake websites with URLs that are very similar to the real one. To be safe, enter the URL you want to visit manually.

Identifying suspicious emails and websites

This can prove challenging for even the most savvy digital natives. So, we put together a tutorial to help you see the signs.

Tips for recognizing fake phone calls

Never share sensitive info

Account info, passwords, or validation codes are for your eyes and ears only. Even a customer service rep shouldn’t ask for them.

Never trust Caller ID

Scammers can easily fake a Caller ID, so don’t rely on it as confirmation a call is legitimate. Just because it says “PayPal” doesn’t necessarily mean the call is from us.

Never return an automated call

Scammers use automated systems to make voice calls. If an automated call provides a number and asks you to call back, don’t. Only contact PayPal through the Contact page in our Help Center or call PayPal Customer Service at 1-888-221-1161.

Learn more

Read more helpful info about protecting your info from phishing and fakes.

How to do more

This FTC page provides additional ways to report phishing and help fight scammers.

Go to the FTC page         

What to do if you receive a phishing message

Detect, avoid, report. That’s the best plan to stay secure.

Get our tips         

Spotting phishing and other fake messages

There are many signs that can indicate a message may be fake.

Read the article         

Our Help Center is always available

Find answers to commonly asked questions and get help with your PayPal account.

Visit the Help Center

Secure shopping and selling starts with PayPal

Spend, send, and manage your money with confidence.

Sign up for free         

1 U.S. Federal Bureau of Investigation (FBI), Internet Crime Report 2020.

2 To confirm your account status or check activity, open the PayPal app or type www.paypal.com into a new browser window and log into your account.

We’ll use cookies to improve and customize your experience if you continue to browse. Is it OK if we also use cookies to show you personalized ads? Learn more and manage your cookies