The PayPal invoice and money request scam
Scammers send real invoices or money requests through PayPal, for things you never ordered, with a note telling you to call. Don't pay and don't call.1
Invoice for a laptop you never ordered1. Note from seller: Unauthorized activity has been detected on your account. Call us urgently to cancel this charge2: +1 (202) 555-01393. Or pay to our crypto wallet to resolve it.4
- An invoice for a product or service you never ordered. PayPal says don't pay it.1
- An alarmist note about an "issue" on your account, telling you to call quickly.1
- A phone number. It reaches the scammer, who wants your personal or financial details.1
- A crypto wallet. PayPal says never send money to one mentioned in an invoice or money request.1
What to do Log in through the PayPal app or website yourself and report the invoice there.1 How senders are faked in email
Rebuilt from PayPal's own description; the seller, amount and number are made up. Checked 28 October 2026 against the sources.
Real envelope, fake request
PayPal lists three forms of this scam.1
Sent through PayPal
An invoice or money request arrives through PayPal itself, for something you never ordered, sometimes with an alarmist note and a fake customer service number.1
Judge the request, not the sender.
If you got one
- Don't pay and don't call.Don't call any number in the invoice note or open suspicious links.1
- Check your account yourself.Log in on the PayPal website or app to see whether any action is needed.1
- Report it.Report unwanted invoices or money requests from inside your account. Forward fake emails to phishing@paypal.com, then delete them.1,3
- If you called and shared details, act today.Change a password you gave out and turn on two-factor authentication. If you let them onto your computer, update your security software and run a scan.4
If money already left your account
How you paid decides who to call first. Call today.4
| You paid by | Contact right away |
|---|---|
| Credit or debit card | Your card issuer or bank, on the number on the card, and ask for a refund. |
| Bank transfer or Zelle | Your bank or credit union. Ask them to reverse the payment. |
| Payment app | The app. Report the payment and ask for a reversal. |
| Gift card | The card's issuer, on the number on the card. Keep the card and the receipt. |
| Wire transfer | The wire transfer company. Say it was a scam and ask for a refund. |
| Cryptocurrency | The exchange or crypto ATM operator, then the FTC at ReportFraud.ftc.gov. |
Questions people ask
Can a scam invoice really come from PayPal?
Yes. Scammers can send invoices and money requests through PayPal, so the email can be genuine even though the request is a scam.1
How do I contact PayPal safely?
Through the Contact page in PayPal's Help Center, or the customer service number PayPal lists there, not a number in an email or an automated call.2
More scam examples
- Unpaid toll textA small toll, a late fee and a link.
- USPS package textA delivery problem and a redelivery fee.
- How to report a scamWhere each kind of scam goes, in the US and the UK.
- "Wrong number" textA friendly stranger who turns to investing.
- Job offer text and task scamEasy pay, then a deposit to get paid.
- Fake Geek Squad renewal emailHundreds of dollars, call within 24 hours.
- Fake bank fraud alert"Reply YES or NO", then a call.
- IRS scam texts and emailsA refund you weren't expecting, or a threat.
- Amazon scam texts and emailsA purchase or account problem that isn't real.
- Crypto romance scamA new friend with a trading app.
- All nine examplesThe home page, with every scam side by side.
Sources 4
- What are invoice scams and money request scams on PayPal?, PayPal Help Center. Read 28 October 2026.
- How to identify fake messages, PayPal Security Center. Read 28 October 2026.
- How to report suspicious emails and messages, PayPal Security Center. Read 28 October 2026.
- What To Do if You Were Scammed (June 2026), Federal Trade Commission, Consumer Advice. Read 28 October 2026.
Every example is rebuilt from an official alert and made safe, and every source shows the day we read it. How we check