Is this payment text from PayPal a scam?
Buy-now-pay-later and fintech brands like PayPal are impersonated with fake account and payment messages. A text, email or app message that looks like it's from PayPal can be genuine — but it can just as easily be a scam built to look identical. The good news: a few quick checks almost always tell a real PayPal message from a fake.
Genuine PayPal links only ever go to paypal.com, paypal.com.au. Below is exactly what a real PayPal message looks like, the scams currently circulating in its name, the red flags that give a fake away, and a real example to compare against. Got a message in front of you? Check it now for an instant verdict.
What a real PayPal message looks like
Genuine messages from PayPal only ever link to paypal.com, paypal.com.au.
- Genuine PayPal emails always arrive from an address ending exactly in @paypal.com or @paypal.com.au
- PayPal never asks you to click a link in an SMS to fix an account limit or confirm a payment
- Real PayPal messages refer to activity you initiated and never threaten immediate account closure
- PayPal invoices or payment requests only appear inside your PayPal account or app, never as surprise attachments
- PayPal never sends SMS messages from random Australian mobile numbers
Crucially, PayPal will never ask you to verify card or login details through a link in a text message.
Common PayPal scams
- Emails that look like PayPal invoices for items you did not buy, with a link to 'view or pay' that leads to a fake login page
- SMS claiming your PayPal account is limited or has received an unexpected payment, urging you to click a link to fix it
- Messages asking you to authorise a payment to an unknown recipient using PayPal's 'Friends and Family' option
Red flags to watch for
- The sender address contains any characters before @paypal.com, such as paypal-support@secure-paypal.com
- The message contains an urgent request to open an attachment or click a link to release funds or lift a limit
- The email references an invoice or payment you do not recognise and asks you to log in via the provided link
- The SMS originates from a standard Australian mobile number rather than PayPal's verified channels
- The message creates urgency by saying the account will be closed within hours if you do not act
Scam text examples
Here's a real example of a scam message impersonating PayPal, with the tell-tale red flags highlighted. Compare it against anything you've received.
PayPal: Your account has been limited after an unexpected payment. Please review the invoice here: paypal-secure-login.com/invoice before it expires.
What gives it away:
- The sender address contains any characters before @paypal.com, such as paypal-support@secure-paypal.com
- The message contains an urgent request to open an attachment or click a link to release funds or lift a limit
- The email references an invoice or payment you do not recognise and asks you to log in via the provided link
- The SMS originates from a standard Australian mobile number rather than PayPal's verified channels
- The message creates urgency by saying the account will be closed within hours if you do not act
Not sure about your message?
Paste the suspicious PayPal text or email and get an instant scam verdict, free.
How to verify a message from PayPal
- Log in directly at paypal.com or paypal.com.au
- Use the official PayPal app to view any invoices or payment requests
Where to report a scam impersonating PayPal
Received — or fell for — a message impersonating PayPal? Report it. It helps authorities and carriers shut the campaign down for everyone who gets the next one.
- Scamwatch — Report the scam to the ACCC's national scam service.
- ReportCyber — Report cybercrime and financial loss to the police.
- ACMA — Report scam texts and spam SMS or calls.
- Forward to 7226 (SPAM) — Forward the scam SMS to short code 7226 so your carrier can block the source.
- IDCARE — Free identity and cyber support if your details were taken.
Frequently asked questions
I received a text claiming to be from PayPal with a link — is it a scam?
Yes. PayPal does not send SMS messages asking you to click links to fix account limits. Delete the message and report it at scamwatch.gov.au.
How do I know if a PayPal email is real?
Check that the sender address ends exactly with @paypal.com or @paypal.com.au and never click links; instead, log in directly at paypal.com or via the app to view any activity.
What should I do if I clicked a link in a fake PayPal message?
Change your PayPal password immediately from the official site, monitor your account for unauthorised activity, and report the message at cyber.gov.au.
Related scam types
Scams impersonating PayPal usually fit one of these patterns. Learn how each works:
Related brands
Other fintech names scammers impersonate — check a message from one:
This guide is general information, not legal or financial advice — always verify with PayPal through an official channel.