Scams going around · Emails

PayPal invoice scam

Pretends to be PayPal billing or customer service. You get a PayPal invoice (a bill) or money request for something you never ordered. It may be sent through PayPal itself, or in a fake email made to look like PayPal. The scammer wants you to pay it. Or a note tells you to call a "customer service" number, where the person who answers tries to get your personal and financial details.

An example of what it can look like

Not a real message: the details are made up.

PayPal Billing <billing@paypal-invoice-help.example>

You have a new invoice. Amount due: $499.99 USD. Note from seller: Your PayPal account was charged for a Bitcoin purchase. If you did not authorize this, call PayPal Support within 24 hours at (202) 555-0147 to cancel and get a refund. Do not pay this invoice.

How to tell

What to do

If you already tapped, paid, called or replied

  1. If you paid through PayPal, contact PayPal right away. Ask them to reverse the payment and refund your money. If you paid with a credit or debit card, call your card company or bank right away. Use the number on the back of your card, and ask them to refund your money.
  2. If you sent cryptocurrency (digital money, such as Bitcoin), contact the company you used right away. That may be a cryptocurrency exchange, a company that holds or sends digital money. Or it may be the company that runs a cryptocurrency ATM, a machine that turns cash into digital money. Tell them it was a fraudulent transaction. Ask them to reverse it and refund your money.
  3. If you gave your PayPal password and can still log in, make a new, strong password. If you use that same password anywhere else, change it there too. Then turn on two-factor authentication (a second check, such as a code sent to your phone).
  4. If you let the caller into your computer, update your security software (the program that protects your computer). Then run a scan (a check of your computer for harmful programs). Delete anything it finds as a problem. Change your passwords and turn on two-factor authentication (a second check, such as a code sent to your phone).
  5. Did you give out your Social Security number? If someone has used your Social Security number, report it at IdentityTheft.gov. If it hasn't been used, or you aren't sure, go to IdentityTheft.gov/databreach.

How to check for real

Open the PayPal app, or type www.paypal.com into a new window of your web browser (the program you use to visit websites). Then log in to check your account. To talk to someone, use the Contact page in PayPal's Help Center. Or call PayPal Customer Service at 1-888-221-1161.

Where to report it

Free guides that go with this

Check a message you got, free · Check a link

Where this comes from

Written from these official warnings, checked 2026-09-25. Lantern is not part of any organization named on this page.

Lantern