Fake PayPal Support Scams
How fraudsters impersonate PayPal customer support to redirect refunds, steal account credentials, and install remote access tools during fake billing disputes.
Part of: Fake Tech Support Calls
Last reviewed: 1 June 2026
PayPal's global user base and the frequency with which people receive genuine PayPal transaction emails makes it one of the most heavily impersonated brands in phone and email support scams. Fake PayPal support callers exploit legitimate users' concerns about account security and fraudulent transactions to extract credentials and remote access.
The scam is particularly effective because the victim is often already concerned about a genuine or staged transaction, making the call feel timely and relevant.
How this scam works on PayPal
A victim receives a convincing PayPal-branded email claiming an unauthorised transaction was made from their account — typically a large purchase or a PayPal Credit activation. A phone number is included for immediate reversal assistance. When called, an agent offers to reverse the transaction but requires remote access to guide the victim through the process.
Once remote access is granted, the scammer navigates the victim's PayPal account and banking apps, staging a false refund overpayment. The victim is shown a large balance appearing in their account and is asked to send back the 'excess' via gift cards or cryptocurrency — which was never real money.
Some variants harvest PayPal credentials directly through a fake 'account verification' call, then use the credentials to make purchases or request money from the victim's linked bank account.
Common red flags
- Email claiming a large PayPal transaction was made, with a callback number to dispute it
- PayPal support agent requesting remote access to process a refund
- Instruction to send back an 'overpayment' via gift cards or cryptocurrency after a fake refund
- Caller asking for your PayPal password, OTP, or security question answers
- Refund email phone number that does not match the official PayPal support number at paypal.com/help
How to protect yourself
- Contact PayPal only through the official number at paypal.com/help — never call numbers in emails
- PayPal support never asks for remote access, passwords, or OTP codes
- Check your actual PayPal account directly in the app before acting on any alert email
- Enable PayPal transaction notifications to verify whether a stated transaction actually occurred
- Never send money back after a claimed overpayment — this is a universal scam pattern
How to report it
- Report phishing emails to [email protected]
- Report to your national fraud service if money was sent
- Contact PayPal's Resolution Centre at paypal.com/disputes for account security incidents
Frequently asked questions
How can I verify a PayPal email is legitimate?
Legitimate PayPal emails address you by your full registered name, not 'Dear Customer' or 'PayPal User.' Check the sender address — official PayPal emails come from @paypal.com domains only. Never call a number embedded in an email — go to paypal.com/help directly to find official contact methods.