PayPal Scam Emails: Red Flags & Tips on How to Avoid

Authorised Push Payment
2 September, 2025 8 min read P.Hampson
Copy LinkFacebookXWhatsAppEmail
A photograph representing the CEL Solicitors post, PayPal Scam Emails: Red Flags & Tips on How to Avoid

Spotted an email from PayPal that doesn’t look quite right?

You’re right to be cautious. Fraudsters are experts at creating convincing emails, and even the most careful people can be caught out. If you’ve received one, it doesn’t mean you’ve done anything wrong.

These are often phishing attempts — emails designed to trick you into handing over sensitive details such as login credentials, bank information or personal data. Because PayPal is such a trusted name with millions of users, scammers frequently target its customers.

This guide explains how to recognise a PayPal scam email, what steps to take if you’ve been targeted, and how specialist legal support could help you recover any money you’ve lost.

We’ll cover how to identify a PayPal scam email, how to prevent phishing scams from happening in the first place and what to do if you’ve fallen victim to a PayPal scam, including your legal support options.

What Are the Laws on PayPal Scam Emails in the UK?

Scam emails claiming to be from PayPal are a form of phishing and, in the UK, they are treated as serious criminal offences. 

Most PayPal scam emails fall under the Fraud Act 2006, which makes it illegal to commit fraud by false representation – for example, pretending to be PayPal to trick you into handing over your login details or bank information.

In some cases, these scams may also breach the Computer Misuse Act 1990, particularly if the email contains malicious links or attachments designed to install malware. Similarly, if scammers unlawfully obtain or misuse personal information, the Data Protection Act 2018 may apply.

Penalties for those convicted of phishing-related fraud can be severe, including significant fines and prison sentences. 

However, while the law is strict, recovering money lost through PayPal scam emails can often be challenging. That’s why many victims choose to seek help from specialist fraud recovery solicitors, who can guide them through the process, protect their rights and give them the best chance of recovering their losses.

Tips for Recognising PayPal Scam Emails

Throughout this section, we’ll advise you on the biggest red flags to watch out for to prevent PayPal scam emails.

Firstly, let’s start with the most common tactics – familiarising yourself with these can put you at a huge advantage, so you’re always one step ahead of them:

Most Common PayPal Email Scam Tactics:

1. Account verification/updating your account 

A common PayPal scam email may ask you to update their account details to verify your identity – either by being prompted to log in to a fake PayPal page to reclaim your account, or by calling a fake number to reveal your information.

The email could claim this is due to a policy change, a change in their terms and conditions or because your account has been temporarily suspended. When you attempt to fix the issue, the scammers then gain access to your information. 

2. Unusual/suspicious activity

Another common scam is claiming your account may be at risk due to ‘unusual’ or ‘unauthorised’ activity. 

You’ll be prompted to secure your account by entering your personal information, which will then provide the attacker with your credentials. 

3. Fake invoices

Attachments included in these emails may also be fake invoices, which are more common among merchant accounts rather than consumers.

The PayPal scammers in this scenario are aware of how many invoices merchants receive, and attempt to blend into the background with this fake invoice, hoping it will go through accounts and be paid. 

4. Payment reversals/rejections/on-hold

This type of scam alerts you that a previously completed transaction has been reversed, rejected, or the payment is “on hold”, meaning you need to click a link to push the payment through again. 

The link then leads to a fake, malicious PayPal page, which is used to harvest your details.

5. Fake shipping prompts

For merchants and business owners, a common PayPal scam is an email claiming that a transaction has been made, meaning you should begin to process shipping a product. 

However, as these emails are fake and no payment has been received, if the attacker is successful, the merchant will then send out the product without realising it’s a scam and, ultimately, never receive money for the product. 

Common Signs of PayPal Scam Emails

Scammers are clever and they know how to make their fake emails seem legitimate. 

The emails will likely closely mimic official PayPal communications, including screenshots of logos, brand colours and even email addresses that appear to be sent from PayPal themselves. 

So, how do you distinguish a fake from a legitimate PayPal email? Well, even scammers make mistakes…

  • Language: Urgent language, such as “your account will be closed” or “immediate action required”, is designed to pressure you into responding quickly. Also, be on the lookout for poor grammar and spelling, especially if combined with an inconsistent tone you wouldn’t expect from PayPal (e.g. too casual, aggressive).
  • Suspicious sender address: Check the sender email address carefully – even tiny variations from the official domain can indicate it’s actually sent from a scammer.
  • Mismatched branding: Look for logos, colours or layouts that don’t quite match genuine PayPal emails, or strange formatting that doesn’t seem professional.
  • Suspicious links or attachments: If your email has unfamiliar links or suggests you should download unexpected attachments, they may lead to fake websites designed to steal your details or install malicious software.

Being able to identify a PayPal scam email is one of the best ways to protect yourself. Learn more about how to spot a phishing email from our dedicated guide.

In short, trust your instincts. If something feels off, it probably is. It’s always safer to delete the email and, if in doubt, contact PayPal directly using trusted details.

What PayPal Will Never Do

One of the easiest ways to spot a PayPal scam email is to know what a genuine PayPal message will never ask you to do. 

PayPal has strict security policies in place, and you should be wary if an email claims otherwise. PayPal will never:

  • Ask you to share your password, bank details or card information by email
  • Request that you download attachments to resolve an issue
  • Send you to a website that doesn’t begin with “https://www.paypal.com/”
  • Ask you to reply directly with personal or financial information
  • Pressure you with threats of account suspension unless you act immediately

Reporting PayPal Email Scams

If you come across a suspicious email from “PayPal”, you should report it directly to the real PayPal. 

You can forward any spam emails to [email protected]. Their security experts will be able to determine if it’s a fake and, if so, they’ll retrieve the source of the email and shut it down as quickly as possible.

You can also notify the UK government about scams and phishing attempts. GOV.UK offers clear instructions for forwarding suspicious emails or text messages, as well as information about how to report misleading advertisements or online fraud.

Taking the time to report phishing not only helps authorities track and investigate scammers, but it can also prevent others from becoming victims by flagging dangerous email addresses.

I’ve Been Scammed By a Fake PayPal Email & Lost Money – What Do I Do?

If you’ve inadvertently fallen victim to a PayPal email scam, you can seek legal support to help you retrieve your money. 

Before you make your claim, make sure you follow these steps:

1. Document the event

As soon as you spot a suspicious PayPal email, make a record of all the details:

Take screenshots of the email, including the sender’s address, the subject line and any links or attachments.

If you entered any personal or financial information, note that down too. Keeping this evidence will help with investigations and any claims you may pursue later.

2. Report the scam email

Before taking further steps, make sure you’ve officially reported the email to:

  • Your email provider: Platforms like Gmail or Outlook allow you to flag phishing attempts.
  • PayPal directly: Forward the email to [email protected], so their security team can investigate and block the scam.
  • Your bank: If you shared financial details, notify your bank immediately so they can monitor your account and stop suspicious activity.
  • The authorities: In England and Wales, report the scam to Action Fraud, the UK’s national centre for reporting cybercrime and fraud. You’ll receive a crime reference number, which may be needed for recovery or legal claims.

3. Secure your accounts

If you believe the scam email tricked you into sharing details, act quickly to secure your PayPal and linked accounts.

Change your PayPal password (and any reused passwords), enable two-factor authentication and check your account for unauthorised activity. 

If your bank or phone details were exposed, contact your providers immediately. Swift action can reduce the risk of further fraud and help contain the damage.

Making a Claim Against a PayPal Scam Email

Once you’ve saved evidence of the fraudulent PayPal email and secured your accounts, the next step is considering legal support.

Legal action after a PayPal scam email can follow two main routes:

  • Civil action: This involves bringing a claim against the scammer to recover your financial losses. If successful, the court may award you compensation.
  • Criminal action: In more serious cases, law enforcement may pursue criminal charges against the fraudster. While this won’t lead to direct compensation for you, it does help stop scammers from targeting others.

It’s important to keep in mind that scammers often use sophisticated methods to hide their identities. This can make it challenging to track them down and may complicate the legal process, so setting realistic expectations from the start is important.

Why Legal Expertise Matters

Having the right legal support can make all the difference. A solicitor who specialises in scam and fraud recovery has the experience to maximise your chances of a successful claim.

Here at CEL Solicitors, we help victims of PayPal scams get their money back – sometimes with additional compensation.

Choosing CEL Solicitors for PayPal Email Scam Claims

Being scammed through a PayPal email is stressful, but you don’t have to face it alone. CEL Solicitors specialise in fraud and scam recovery and have a strong track record of recovering millions for clients.

We work on a No-Win, No-Fee basis, so you won’t need to pay anything up front. This gives you access to expert legal help at no financial risk.

If you’re unsure about the strength of your case, our consultation is completely free. We’ll listen, review your situation carefully and provide clear advice on your next steps.

Ready to pursue your PayPal email scam claim? Get in touch today for a free, no-obligation consultation. Call 0333 305 4982 for the support you deserve.