PayPal Scams

Header

Author: Trend Micro

November 18, 2021

This article is from Trend Micro.

On the whole, PayPal provides a great service in safely transferring money online. It is simple and secure and comes with many checks and balances to help protect users. Nonetheless, given its popularity, scammers aggressively utilize the platform’s name in their criminal activity. In this article, we’ll provide a run-down on common PayPal scams, how they work and what you can do to avoid being a victim.

Common Examples

1.    PayPal Account Problems

This is perhaps the most common scam. Scammers get in touch via email to “inform you” that there is a problem with your account. In the email there will be links which you are instructed to follow in order to resolve the issue. These are phishing links, the aim being to get you to enter personal information on the criminal’s fake log-in webpage. See below example.

PayPal email scam and fake PayPal login page. Source: Twitter

Text: Your account has been limited

Dear Customers We’ve limited your account. After a recent review of your account activity, we’ve determined you are in violation of PayPal’s Acceptable Use Policy. Please log in to confirm your identity and review all your recent activity

Secure your account

If you have questions about any of these activity or your account, please don’t hesitate to get in touch with us. Thank you for being a PayPal customer

Sincerely, PayPal

1.    Advance Payment Fraud

This is another common PayPal scam. In it, victims will receive the miraculous news that they are owed an amount of money: inheritance, lottery, compensation etc. The victim will be asked to make a small advance processing payment (using PayPal) and perhaps fill out a form with their personal data.

If you are unlucky and/or inexperienced enough to fall for this, the sender disappears upon payment, and any personal data you shared will end up on a database — most likely on the dark web.

2.    Overpayment Refund

This one is more humanly complex than the above — and particularly crafty. In this scam, a buyer sends a seller (you) the payment for goods. However, they send more than the sale price. The buyer points to the “accident” and asks for a refund of the difference.

As soon as the seller/you do so however, the buyer/scammer immediately cancel the original transaction — thus making a profit with the difference you refunded.

3.    Fake Charities and Investment Schemes

This horrible scam involves malicious requests sent out asking for donations to a fake charity. Often it will be requested via PayPal. Canceling the payment is no help if the scammer can withdraw the funds promptly —so you will need to check in advance. These schemes increase in frequency during/after a natural disaster.

Similar is the investment opportunity, seducing with promises of great risk-free profits. Again, the investment will be paid via PayPal.

Steps to Take

The following are some useful guidelines to help protect yourself:

  • Always pay attention to the sender email addresses.

Source: PayPal

  •  If you are offered free money, there WILL be a catch.
  •  If there is a problem with a transaction when using PayPal, it’s better to cancel the whole thing and start afresh.
  •  In regard to charities, always do your research into the body. These are good links: Charity Navigator & Charity Watch.
  •  Keep an out for tell-tale signs: grammatical mistakes, grand claims, exclamation marks (!).
  •  You can also report fake emails to PayPal directly to help more people:
    1. Visit the PayPal Resolution Centre
    2. Click Report a Problem.
    3. Select the transaction ID you want to dispute and click Continue.
    4. Select I want to report unauthorized activity.
    5. Follow the instructions to report the issue.
  • We would also recommend a cybersecurity product such as Trend Micro Check which is designed to combat things such as disinformation and scam emails.

So to summarize, keep your eyes peeled for these PayPal scam attempts! And if you’ve found this article a useful and/or interesting read, please do SHARE with family and friends to help keep loved ones secure and protected.

Report a Scam!

Have you fallen for a hoax, bought a fake product? Report the site and warn others!

Help & Info

Top Safety Picks

Your Go-To Tools for Online Safety
Disclaimer: Some of the links here are affiliate links. If you click them and make a purchase, we may earn a commission at no extra cost to you.

  1. ScamAdviser App : That site looks legit. That's exactly how they get you. Modern scams are frighteningly convincing. ScamAdviser scans sites and blocks fraud calls automatically. Free on iOS & Android.
  2. NordVPN : NordVPN delivers powerful, seamless protection for your online life - whether you're at home, on public Wi-Fi, or traveling abroad. Recognized as one of the fastest VPN services available, it combines lightning-fast speeds with advanced encryption to keep
  3. Incogni : Incogni automatically removes your personal data from data brokers that trade in personal information online, helping reduce scam and identity theft risks without the hassle of manual opt-outs. Reclaim your privacy now!
  4. Private Internet Access (PIA) : PIA gives you a no-logs VPN built on the latest encryption standards and WireGuard protocol — meaning your browsing activity stays yours alone. Fast, private, and transparent. Take back your privacy today!
  5. Surfshark VPN : One subscription, unlimited devices. Surfshark is the fastest VPN out there — covering your phone, laptop, tablet and more with a stable, secure connection for browsing, streaming and working. Get Surfshark now!
  6. Proton VPN : Independently audited and built with a strict no-logs policy, Proton VPN is trusted by over 3 million users worldwide. It’s been named Best VPN by Wired, PCMag, and Vice—offering strong encryption for anyone who takes their privacy seriously. Give Proton

Popular Stories

In a nutshell: A good VPN protects your privacy with strong encryption, a strict no-logs policy, and fast protocols like WireGuard. The best VPNs also offer wide server coverage, leak protection, and easy-to-use apps for all devices. For 2025, the top providers are NordVPN, ExpressVPN, Surfshark, Proton VPN, Private Internet Access, CyberGhost, and Mullvad—each excelling in speed, security, or value. In an age where every click is tracked, a Virtual Private Network (VPN) is no longer just a luxury—it's an essential tool for digital privacy and security. A VPN works by creating a secure, encrypted tunnel between your device and the internet, masking your real IP address and protecting your sensitive data from prying eyes. But with hundreds of providers out there, how do you sort the secure from the suspect? This guide breaks down the non-negotiable features of a quality VPN and highlights the 7 top-rated services for 2025. What to Look for in a Good VPN: The 4 Non-Negotiable Pillars 1. Ironclad Security Features Strong Encryption: AES-256, the gold standard. Secure Protocols: OpenVPN, WireGuard, NordLynx, Lightway. Avoid PPTP. Kill Switch: Ensures no accidental IP leaks. Leak Protection: Covers DNS, IPv6, and WebRTC. 2. Verified Privacy Practices No-Logs Policy: No activity or metadata tracking. Independent Audits: Verification by third parties. Safe Jurisdiction: Prefer countries outside the 5/9/14 Eyes alliances. 3. High-Speed Performance Fast Protocols: WireGuard and equivalents. Large Server Network: Less crowding, more reliable speeds. 4. Essential Usability Features Multi-Device Apps: Windows, Mac, iOS, Android, routers. Simultaneous Connections: One account, many devices. Unblocking Power: Netflix, Hulu, BBC

This article has been updated by Jamie James on June 9 with the latest data and analysis we have found using real user reports and experiences submitted to ScamAdviser. Just received that terrifying notification? Or perhaps you've noticed suspicious activity in your accounts? Take a deep breath. Your email, password, phone number, home address, payment details, or identity documents may now be in places you cannot control. But the next steps do not have to be confusing. What matters most is how quickly you act, order, and know which exposed data creates the biggest risk. This guide explains what to do after a data breach, how to check the damage, and how to protect yourself from identity theft, account takeover, and follow-up scams. Quick Summary Verify the data breach notice through the company’s official website before clicking any links. Secure your primary email account first because it controls many password resets. Change the exposed password and every reused or similar password. Enable multi-factor authentication on email, banking, payment, cloud, and social accounts. Contact your bank or card issuer if payment or bank account details were exposed. Freeze or protect your credit if sensitive identity information was compromised. Watch for phishing messages, fake refund offers, and scam websites that use your leaked details. Starting with Data Breach Numbers The numbers don't lie: according to a 2024 report, the number of data breach victim notices has grown by a staggering 211% year-over-year. This isn't just a distant threat; it's a stark reality many individuals fa