SCAM CHECK

Is This PayPal Invoice Email A Scam?

Got an invoice from PayPal for something you didn’t buy? Here’s the 60-second check — and how the scammers turn a real PayPal email into a fake charge.

Updated May 25, 2026 · By SmartOne · 5 min read

Some links in this guide pay us a small commission. We only recommend tools we use and trust. It never costs you extra, and it helps keep the lights on at Making Sense Of Security.

The Short Answer

Yes, This Is Likely A Scam If…

The invoice is for a product you didn’t order, the "customer service" phone number is in the email body (not in your PayPal account), and you’re being asked to call to dispute it. Real PayPal disputes happen inside your PayPal account — never by calling a number in an email.

Quick Risk Checklist

If any of these match the message you got, treat it as a scam until you’ve verified directly with the real company or agency.

  • ⚠The invoice is for a product or service you didn’t buy.
  • ⚠There’s a phone number in the email body telling you to call to dispute or cancel.
  • ⚠The sender domain is paypal.com — but the "merchant" or "memo" field has odd grammar, urgent language, or a 1-800 number.
  • ⚠The amount is unusually round ($499.99, $799.00) or oddly specific to feel urgent.
  • ⚠The email says you’ll be charged automatically unless you respond within hours.
  • ⚠You don’t have a PayPal account, or you weren’t expecting an invoice on this account.

What The Scam Looks Like

Here’s the actual wording from a real scam — links are defanged so you can’t accidentally tap them.

From: service@paypal.com
You sent an invoice for $599.00 to YOUR EMAIL. If you didn’t authorize this transaction, call our refund team immediately at 1-(888) 555-0181 within 24 hours to dispute. Failure to call will result in automatic processing.
paypal[.]com/invoice/cancel?id=98214 (link styled to look like PayPal — actually a tracking redirect)
— PayPal Customer Service

“Defanged” means we replaced the dot in the URL with [.] so it can’t be clicked. Scam URLs stay unclickable on this page on purpose.

What To Do Right Now

If you got this and haven’t tapped anything yet, here’s the order of operations.

  1. •Don’t call the phone number in the email. That number connects you to the scammer, not PayPal.
  2. •Open paypal.com in a new browser tab (or open the PayPal app). Log in. Check your invoices and recent activity directly — if no charge exists, the email is fake.
  3. •Report the email to PayPal by forwarding it to spoof@paypal.com (PayPal’s phishing reporting address). Then delete it.
  4. •If you replied or called, change your PayPal password and enable 2FA. Watch your account closely for the next 30 days.

What If You Already…

Don’t panic. Most damage is undoable if you act quickly. Pick the one that applies and follow the recovery steps.

… Called The NumberRecovery Steps →
… Clicked The LinkRecovery Steps →
… Logged In On A Fake PageRecovery Steps →
… Gave A Verification CodeRecovery Steps →
… Sent Money Or A RefundRecovery Steps →
… Installed Remote-Access ToolRecovery Steps →

Recovery Library is in build. These links go to placeholder pages until those guides ship.

How To Verify A PayPal Email Safely

  1. •Don’t click anything in the email. Open a new browser tab and type paypal.com manually. Bookmark it once and use the bookmark.
  2. •Log into your PayPal account directly. Real invoices show up in your account under Activity. If it’s not there, the email is fake.
  3. •Use PayPal’s Resolution Center (inside your account) to dispute anything that IS real. Never use a phone number from an email.
  4. •Check the sender’s full email address. A genuine PayPal email comes from a paypal.com domain — not paypal-service.com, paypal.alerts.com, or anything with extra words.

Where To Report A PayPal Invoice Scam

Take The 60-Second Scam Check Quiz

Eight quick questions about the message you got. We’ll give you a risk score and what to do next.

Scam Check Quiz

Is This PayPal Invoice Email A Scam?

Answer Yes or No for each. We’ll give you a score and 3 specific next steps.

Common Questions

Why Does The Email Look So Real?

Because scammers often send fake invoices from the actual PayPal system using a hijacked or freshly-made merchant account. The email DOES come from PayPal — it’s the invoice itself that’s fraudulent. Always verify in your account, not the email.

What Happens If I Call The Number?

A scammer answers, walks you through "canceling" the invoice, and convinces you to either share login details, share a 2FA code, install remote-access software like AnyDesk or TeamViewer, or send a refund via gift card or wire. Don’t call.

Should I Click The Cancel Or Dispute Link In The Email?

No. Even if the link looks like it goes to paypal.com, it may be a redirect that captures your login. Always open paypal.com directly in a new tab and handle disputes inside your account.

I Already Talked To Them — What Do I Do?

Hang up immediately. Change your PayPal password, then change the password on the email that received the invoice. Enable 2FA on PayPal. If you shared any codes or installed software, also follow our recovery steps above and consider a credit freeze.

Will PayPal Ever Call Me About A Fraudulent Charge?

PayPal does send emails about disputes you initiated, but they will not cold-call you about charges you didn’t make. If you’re worried, log into your PayPal account directly and check the Resolution Center.

Free Download

PayPal Invoice Scam Check — Printable Checklist

One-page printable. Stick it on the fridge or save it to your phone.

Download The Checklist (PDF)

Related Guides

Last updated May 25, 2026 · Written by SmartOne · Comments disabled on Scam Check pages

Stay In The Loop

Weekly: the 3 scams trending this week — 2-minute read. No spam.

We won't send you spam. Unsubscribe any time.