Welcome to the PayPal Community Help Forums!
Fraudulent emails often pretend to be from PayPal (but aren't from PayPal) and often send you to fake websites. These emails try to get you to reveal sensitive personal information, such as your bank or credit card numbers, PIN numbers, or account passwords.
At PayPal, we won't send you an email asking you to give us any of the following:
- your full bank or credit card number
- your bank/debit card PIN number
- your entire driver's license numbers
- a listing of your email addresses
- your password (to PayPal or any other account)
- the answers to your security questions
We also won't ask you to view an attachment or install a software update. Only a few of our emails to you - such as for password recovery or to confirm an email address - will ask that you click on a hyperlink to complete an action. If you didn't request a password reset or add an email address, scrutinize the email further before proceeding.
Most fraudulent emails will present you with a situation that tries to provoke you into immediate action - and usually recommends that you click on a link in the same email to dispute a transaction or provide the requested information as soon as possible. Some may request that you download and fill out a form and then send it back. Don't do it!
Our emails to you will always address you by the first and last name or the business name you registered with on PayPal. Unsure of what this is? Go to https://www.paypal.com and log in. You'll be greeted by your first and last name. Emails that address you by "Dear PayPal Member" or other, similar greetings are a sure give away that they aren't real.
If you've received an email that arouses your suspicions, stop! Don't open it or click on any links. Open a separate browser window and go to directly to https://www.paypal.com and check on your account. If there is an issue or a payment has been made, it will be visible there.
If you receive a fraudulent or fake email pretending to be from PayPal, or if you're uncertain it is from PayPal, please forward the email, including the header, to spoof@paypal.com. Then delete the email from your inbox.
I know we all try to be vigilant in the digital era, but if you've responded to a spoof email with any sensitive personal information, or entered that information on a site that pretends to be PayPal but isn't, take action to secure those pieces of information as soon as possible. If you believe you have been a victim of identity theft or other personal information has been compromised, start by learning more here.
Some additional resources:
Your Guide to Phishing (explains what phishing is, how to recognize it, and how to fight it)
The Fight Phishing Challenge (How good are you at spotting phishing now? Test your knowledge!)
Stay safe,
Adrian
Was my post helpful? If so, please give me a kudos!
Did my post solve the issue? If so, please accept it as a solution!
