location-watch watch, smartwatch media-replay replay, reload, refresh misc-simple-check simple check, ok, tick misc-gas gas, pump action-browse-discover-view browse, discover, view action-cart-shop cart, shop action-delete-trash delete, trash action-download download action-exchage exchage action-flag-alert flag, alert action-back-return-arrow back, return, arrow action-previous previous, back action-top top, up action-forward-arrow forward, arrow action-message message action-search search action-send-fast-paper-plane send, fast, paper, plane action-share-export share, export action-sign-fill sign, fill, contract, document, edit, file, page, paper, pen action-transfer transfer action-upload upload circle circle feature-heart-like-favorite heart, like, favorite feature-lock-secure lock, secure feature-lock lock feature-protection-umbrella protection, umbrella feature-secure-unlock secure, unlock feature-secure-unlocked secure, unlocked feature-smart smart feature-star-bookmark-favorite star, bookmark, favorite location-browser browser location-cloud-weather cloud, weather location-credit-card credit, card location-day day location-document document location-moon forecast, moon, night, weather location-history history location-home home location-inbox inbox location-menu menu location-smartphone smartphone location-tablet tablet location-user-profile user, profile location-wallet wallet location-world-ww world wide web, www media-airplay airplay media-audio-media-music-record-recording-records audio, media, music, record, recording, records media-camera-video camera, video media-mute mute media-play-next-filled play, next, filled media-play-next play, next media-radio radio media-rewind rewind media-forward forward media-volume volume misc-achievement-cup achievement, cup misc-add add misc-alarm-notification-bell alarm, notification, bell misc-archive-copy-document-documents-file-files archive, copy, document, documents, file, files misc-archive-copy-document-documents-file-files2 archive, copy, document, documents, file, files misc-arrow-ccw-back-history-left-repeat-restart-revert arrow, ccw, back, history, left, repeat, restart, revert misc-arrow-cw-forward-media-previous-redo-refresh arrow, cw, forward, media, previous, redo, refresh misc-bag-breafcase-bussiness-document-portfolio bag, breafcase, bussiness, document, portfolio misc-ball-sport ball, sport misc-battery battery misc-binder binder misc-charge charge misc-check check misc-cloude cloude misc-coffee coffee misc-config config misc-cube cube misc-database database misc-empty empty misc-flash-light flash, light misc-idia-lightbulb idia, lightbulb misc-magnet magnet misc-maps-base-coordinates-direction-find-folding-gps maps, base, coordinates, direction, find, folding, gps misc-pen pen misc-print print misc-remove remove misc-status status misc-windows windows misc-monitor monitor misc-stopwatch stopwatch util-access access util-alarm-bell alarm, bell util-alarm alarm util-atm-key-pad atm, key, pad util-bookmark-book bookmark, book util-bookmark bookmark util-box box util-calculator calculator util-calendar calendar util-camera-photo camera, photo util-chat chat util-data-analysis-analytics-bar-business-chart-charts data, analysis, analytics, bar, business, chart, charts util-info info util-learn learn util-link-connect link, connect util-mail-message mail, message util-map-pin-location map, pin, location util-open-mail-empty open, mail, empty util-open-mail open, mail util-config-wheel config, wheel util-settings settings util-sizer sizer util-speech speech util-time-clock time, clock util-time-sensitive time, sensitive web-cake-birthday cake, birthday web-calendar calendar web-dollar dollar web-faster-checkout faster, checkout web-send-and-receive send, and, receive web-woman woman web-no-extra-cost no, extra, cost logo-android-robot android, robot logo-apple apple logo-paypal paypal logo-kitsune kitsune, fox - Don't use this! :)

Common email scams

We typically use email to contact our customers. The information below can help you make sure it’s really us reaching out, and not somebody trying to gain access to your account.


Faked sender email address

Fraudsters can easily fake the “friendly name” in the sender’s email address. For example, an email can appear to be from “PayPal Services,” but actually be from spfr2013qz7@nomail.com.

Some email clients make it hard to see the real name. But if you mouse over the friendly name or click “Reply,” you should be able to see the full email address of the sender. Sophisticated fraudsters can fake the entire name to look like a legitimate sender, so be careful.

Though verifying a correct sender address is important, it’s not enough. It’s important to look at the entire email. When you check your account, always enter "www.PayPal.com" into your browser instead of clicking a link in an email.

If it sounds too good to be true, it probably is

Advance fee fraud. Most of us are careful if a stranger approaches on the street and offers a deal that's just too good to be true. But we're much less cautious online, which puts us at risk. If you get an offer for free money, there's probably a catch. Typically, fraudsters will ask you to send some smaller amount (for taxes, for legal documents, etc.) before they can send you the millions you are promised, but which they never intend to send you.

Verify through your PayPal account. If you receive an email that says that you've received a PayPal payment, take a moment to log in to your PayPal account before you ship any merchandise. Make sure that money has actually been transferred, and that it isn’t just a scam. Remember not to follow email links. The safest way to access your account is always to open a browser window, navigate to PayPal.com, and enter your login info.

Be aware of telltale signs of fraud. Messages asking you to pay a small handling fee to collect some fabulous prize are usually a scam. “High-Profit No-Risk” investments are usually scams. Messages insisting that you “Act Now!” for a great deal are often scams.

Fake charities. Scammers use disasters to trick kind-hearted people into donating to fake charities. This usually happens when there is a refugee crisis, a terrorist attack, or a natural disaster (like an earthquake, flooding, or famine). Thoroughly check the background of any charity to make sure your donation goes to real victims.

Use resources like

http://www.charitynavigator.org

http://www.bbb.org/us/charity

http://www.charitywatch.org/

to check out charities. If a charity does not have a website, be cautious.

To learn more about common scams and how to avoid them, search online for more about advance fee fraud. You can also read the FBI's material on common types of scams. Most importantly: be as cautious online as you awaht re in the real world.

Here are some common scams where fraudsters use spoofed emails:

"Your account is about to be suspended." Many fraudsters send spoofed emails warning that an account is about to be suspended, and that the account holder must enter their password in a spoofed webpage. Be careful; PayPal will never ask you to enter your password unless you are on the login page. Report any suspect email by forwarding it to spoof@paypal.com. This can help keep you and your family secure.

"You've been paid." Some fraudsters try to trick you into thinking that you've received a payment. They want what you're selling for free. Before you ship anything, log into your PayPal account and check that you were actually paid.

"You have been paid too much." Fraudsters may try to convince you that you've been paid more than you were owed. For example, a spoofed email says that you’ve been paid $500 for a camera you listed at $300! The sender asks you to ship the camera in addition to the extra $200 you were “paid” by mistake. In this example, the scammer wants your camera AND your money, but hasn’t actually paid you at all. Don't fall for it! Simply log into your PayPal account and check that you were paid before sending anything.

How to identify real PayPal emails

An email from PayPal will:

  • Come from paypal.com. Scammers can easily fake the “friendly name,” but it’s more difficult to fake the full name. A sender like “PayPal Service (zxk1942R3@gmail.com)" is not a message from PayPal. But sophisticated scammers can sometimes fake the full name, so look for other clues.
  • Address you by your first and last names, or your business name.

An email from PayPal won't:

  • Ask you for sensitive information like your password, bank account, or credit card.
  • Contain any attachments or ask you to download or install any software.

Bogus links in emails

If there's a link in an email, always check it before you click. A link could look perfectly safe like www.paypal.com/SpecialOffers, but if you move your mouse over the link you'll see the true destination. If you aren’t certain, don’t click on the link. Just visiting a bad website could infect your machine.

If you do click a link in an email, be sure to review the URL of the site where you land. It is easy for bad guys to copy the look of a legitimate website, so you need to check that you are on the correct website.