How do I know if an email is from PayPal and how do I report a spoof email?

You'll know an email is from PayPal because:

  • We always address you by your name or your business name as registered on your PayPal account. We'll never use generic greetings like "Dear user" or "Hello PayPal member" in our email.
  • We'll never ask you to reveal your financial information, your password, or the answer to your PayPal security questions.
  • We'll never attach any software updates in our emails and ask you to install it to your devices.
  • We'll never ask you to ship the items and provide the tracking information to the buyers before you receive the payment in your PayPal account.

To protect yourself, always log in to your PayPal account to confirm the information you received in an email. You can find all your transactions in your Activity page. For any cases such as buyer complaints or limitations, you can find them in the Resolution Center.

Fake emails, also known as phishing emails, are attempts to collect your personal and financial information. These fake emails often link to fake websites that encourage you to enter personal information (for example, credit card numbers, passport number, and account passwords).

If you think you've received a suspicious email, please forward the suspicious email to us and we will contact you once our investigation is complete.

Here's how:
  1. Don't change the subject line.
  2. Forward the entire email to spoof@paypal.com.
  3. Don't forward the message as an attachment.
  4. Delete the email from your inbox.

In the meantime, don't click on any links or download any attachments within the suspicious email.

If you find a suspicious or fake website, please forward the web address or URL to spoof@paypal.com. We review this information thoroughly because your account safety is our top priority.

If you replied to the suspicious email or have entered any personal information on a possibly fake website, please take the following steps as soon as possible:
  1. Change your PayPal account password and security questions immediately.
  2. Contact your bank and credit or debit card issuer and let them know what happened.
  3. Review your recent PayPal account activity to make sure that you authorized all the payments.
  4. Report any unauthorized transactions using the Resolution Center. Remember, you're 100% protected against unauthorized payments sent from your PayPal account.

If you clicked on a link or opened an attachment in the email, your computer might have been infected with a computer virus. In this case, please contact your software security provider to identify the steps you should take to keep your account information and computer secure. We highly recommend that you install anti-virus software on your computer, especially if you don't have one installed at the moment.

We've put together some useful information on phishing and identity theft for you.

Here's how to find it:
  1. Go to your local PayPal website.
  2. Click Security near the bottom of the page.
  3. Click on the Stay safe online/phishing link under "More security topics" near the bottom of the page.

We continuously work to shut down fake emails and websites. Our system reviews all submissions sent to spoof@paypal.com, and we have dedicated teams constantly working to identify and prevent fraud. We also work closely with law enforcement bodies around the world to stop online criminals.