Fraud Dangers | PayPal Scam Email

Scam Emails & Phishing: Is that email really from PayPal?

Unfortunately there are fraudsters out there who try to use our trusted name to get information from you. This is called “phishing” because the sender is “fishing” for your personal information. The goal is to trick you into clicking through to a fake or “phishing” website, or into calling a fraudulent customer service number where they can collect and steal your sensitive personal or financial information.
If you have opened an email that you don’t think is from PayPal, and haven’t clicked on any links, you shouldn’t have anything to fear. If you have clicked on a link, or you have downloaded an attachment, learn more about Identity Protection.

Here are some helpful tips on how to spot Scam Emails:

The Senders Address
The “From” line may include an official-looking address that mimics a genuine one.

Generic Greetings
Be wary of impersonal greetings like “Dear User”, or your email address. A legitimate PayPal email will always greet you by your first and last name.

Typos/Poor Grammar
Emails sent by popular companies are almost always free of misspellings and grammatical errors.

False Sense of Urgency
Many scam emails tell you that your account will be in jeopardy if something critical is not updated right away.

Fake Links
Check where a link is going before you click on it by hovering over the URL in an email, and comparing it to the URL in the browser. If it looks suspicious, don’t click it.

Attachments
A real email from PayPal will never include attachments. Because they can contain spyware or viruses, you should never open an attachment unless you are 100% sure it’s legitimate.

Overall, never click on a link in an email that requests personal information. Any time you receive an email about your PayPal account, open a new browser, type in www.paypal.ca, and login to your account directly.

PayPal will never ask you to provide personal information in an email:

Credit card numbers
Driver’s license numbers
Email addresses

Bank account numbers
Social insurance number
Your full name

How to spot a fake website:

Deceptive URLs
Some criminals will place a fake browser address over the real one, so it appears you’re on a legitimate website. But even if a URL contains the word PayPal, it may not be a PayPal site.

Examples of fake PayPal addresses:
http://signin.paypal.ca@10.19.32.4/
http://83.16.123.18/pp/update.htm?=
https://www.paypal.ca/=cmd_login_access
www.secure-paypal.ca

Always log in to PayPal by opening a new browser and typing in www.paypal.ca or www.paypal.com

The term “https” should precede any web address (or URL) where you enter personal information. The “s” stands for secure. If you don’t see “https,” you’re not in a secure Web session, and you shouldn’t enter your information.

Report suspicious emails or phishing websites to PayPal

It is important to report potential PayPal phishing email or phishing site as soon as possible.

Forward the entire phishing email or phishing site information to phishing@paypal.com

Do not alter the subject line or forward the message as an attachment.

Delete the suspicious email from your email account.

We’ll send you an email response to let you know if the email is indeed fraudulent. In the meantime, don’t click on any links or download any attachments.

Be cautious when communicating with others through direct messaging as scammers may attempt to trick you into providing personal information. PayPal users should never share sensitive personal or financial information, for example:

Bank Account Numbers including last four digits

Credit Card Number, Verification Code or PIN

Passwords/PINs

Credit Score

Social Security Number or Tax Identification Number

Account Balance, Credit Balance of any PayPal account or service

Government issued ID information, for example Passport, Drivers License, Military Identification Number or any other identification number

Home address, date of birth or personal family information

Unauthorized Account Activity

If you think someone has used your account without permission, report it to PayPal immediately and we’ll help protect you as much as possible.

You can notify us in the following ways:

Call PayPal Customer Service at 1 (402) 935-2050.

Use the form available in the PayPal Resolution Centre to file an unauthorized transaction report.

Write to PayPal:
Attn: Error Resolution Department P.O. Box 45950 Omaha, NE 68145-0950 USA

Once your claim has been filed, we will investigate and do our best to resolve the issue. Any transaction found to be in error or unauthorized will be refunded.

Please be aware we will notify any other parties involved in the transaction in order to help us investigate and resolve your claim.

FAQs

An email from PayPal

PayPal
PayPal Payouts are a fast, convenient way for businesses to send money to multiple people simultaneously. You can specify the recipients using their email address, domestic mobile number, or payer ID (a unique identifier assigned to every PayPal account). Recipients can receive the money in a PayPal account.
https://www.paypal.com › cshelp › article › what-is-the-payou...
What is the Payouts API (formerly known as Mass Pay) and ... - PayPal

won't ask you to send sensitive information like your password, bank account, or credit card

Opening an infected attachment can have serious consequences. It may launch a keylogger which steals personal information such as usernames and passwords, takes periodic screenshots, grabs sent emails or harvests credit card numbers and bank details.

Send money in a few seconds.

Use their email address and they'll get the money in a simple, faster and more secure way. Enter your recipient's email address. Enter an amount and send your money more securely. Track your transactions in your account activity.

Verify through your PayPal account.

If you receive an email that says that you've received a PayPal payment, take a moment to log in to your PayPal account before you ship any merchandise. Make sure that money has actually been transferred, and that it isn't just a scam. Remember not to follow email links.

Scammers will be able to tell that you opened an email if you download any attachments or click on any links (which you should never do), or if your email client automatically loads any images that are embedded in the message.

Just opening the phishing message without taking any further action will not compromise your data. However, hackers can still gather some data about you, even if all you did was open the email.

Most viruses aren't sophisticated enough to trigger on opening. The worst case is that the scammers will see you've opened their email. They can then gather information such as your location, IP address, device type, and operating system (e.g., Microsoft, Mac, Android, iOS).

Any email from PayPal will address you by your first and last name or your business name in the body of the email. We will never address you as “Dear valued customer” or “Dear buyer”. An email from PayPal won't ask you to send sensitive information like your password, bank account, or credit card.

Your PayPal address is the email address on your PayPal account. You can double-check the address by logging in and going to Profile, and then Add or Edit Email. If it's the only email address on your account, then you're logging into your account using that email address as well.

It is generally safe to give someone your PayPal email address if you trust them. However, there are some risks involved. One risk is that scammers may use your PayPal email address to send you phishing emails or overpayment scams.

Fraud Dangers | PayPal Scam Email | PayPal CA (2024)