Scams going around · Emails
PayPal invoice scam
Pretends to be PayPal billing or customer service. You get a PayPal invoice (a bill) or money request for something you never ordered. It may be sent through PayPal itself, or in a fake email made to look like PayPal. The scammer wants you to pay it. Or a note tells you to call a "customer service" number, where the person who answers tries to get your personal and financial details.
An example of what it can look like
Not a real message: the details are made up.
PayPal Billing <billing@paypal-invoice-help.example>
You have a new invoice. Amount due: $499.99 USD. Note from seller: Your PayPal account was charged for a Bitcoin purchase. If you did not authorize this, call PayPal Support within 24 hours at (202) 555-0147 to cancel and get a refund. Do not pay this invoice.
How to tell
- It bills you, or asks you for money, for something you never ordered.
- A note tells you to call a "customer service" number quickly to fix an "issue" on your account or cancel a charge.
- It rushes you or warns that your account is in trouble.
- An email made to look like PayPal may start with "Dear user" or "Hello, PayPal member." PayPal says its messages always use the full name on your PayPal account. But scammers can also send bills through PayPal itself, so seeing your name doesn't make a bill real.
- If you call, the person asks for your password or a code. PayPal says even a customer service rep shouldn't ask for these.
What to do
- Don't pay it, even if it came through PayPal. Never send money to a cryptocurrency wallet (an account for digital money, such as Bitcoin) named in it.
- Don't call any phone number in the note, and don't tap links in the email.
- Open the PayPal app, or type www.paypal.com into a new window of your web browser (the program you use to visit websites). Then log in to see if you really need to do anything.
- If the invoice or request shows up in your PayPal account, cancel it. On the PayPal website, go to Activity, choose it, click Cancel, then Yes. In the PayPal app, tap Decline.
- If it came by email and you don't see it in your PayPal account, forward the email to phishing@paypal.com, then delete it.
If you already tapped, paid, called or replied
- If you paid through PayPal, contact PayPal right away. Ask them to reverse the payment and refund your money. If you paid with a credit or debit card, call your card company or bank right away. Use the number on the back of your card, and ask them to refund your money.
- If you sent cryptocurrency (digital money, such as Bitcoin), contact the company you used right away. That may be a cryptocurrency exchange, a company that holds or sends digital money. Or it may be the company that runs a cryptocurrency ATM, a machine that turns cash into digital money. Tell them it was a fraudulent transaction. Ask them to reverse it and refund your money.
- If you gave your PayPal password and can still log in, make a new, strong password. If you use that same password anywhere else, change it there too. Then turn on two-factor authentication (a second check, such as a code sent to your phone).
- If you let the caller into your computer, update your security software (the program that protects your computer). Then run a scan (a check of your computer for harmful programs). Delete anything it finds as a problem. Change your passwords and turn on two-factor authentication (a second check, such as a code sent to your phone).
- Did you give out your Social Security number? If someone has used your Social Security number, report it at IdentityTheft.gov. If it hasn't been used, or you aren't sure, go to IdentityTheft.gov/databreach.
How to check for real
Open the PayPal app, or type www.paypal.com into a new window of your web browser (the program you use to visit websites). Then log in to check your account. To talk to someone, use the Contact page in PayPal's Help Center. Or call PayPal Customer Service at 1-888-221-1161.
Where to report it
- On the PayPal website: go to Activity, select the invoice or money request, click "Report this invoice" or "Report," and follow the steps
- Forward a fake PayPal email to phishing@paypal.com, then delete it
- ReportFraud.ftc.gov, the Federal Trade Commission's reporting site
Free guides that go with this
Check a message you got, free · Check a link
Where this comes from
Written from these official warnings, checked 2026-09-25. Lantern is not part of any organization named on this page.