Fake PayPal 'Safe Account' Wire Transfer Scam
Criminals impersonating PayPal's fraud team instruct account holders to withdraw their PayPal balance and wire it to a 'PayPal-secured holding account' to protect funds during a fabricated security investigation — a safe-account scam using PayPal's trusted name.
Part of: Safe Account Scams
Last reviewed: 7 June 2026
PayPal is one of the most widely held digital payment accounts, and scammers have adapted the classic safe-account technique to exploit it. Because PayPal balances are not held at a traditional bank, many users are uncertain about how PayPal fraud investigations actually work — an uncertainty that fraudsters deliberately cultivate.
The attack begins with a call from a person claiming to be from PayPal's Security Operations Centre. The caller says that PayPal's systems have detected a series of unauthorised transactions being processed from the victim's account and that the balance must be moved to a 'secure PayPal escrow wallet' while the investigation proceeds. They guide the victim through withdrawing the balance to a bank account and then immediately wiring or sending that money to an account they specify.
The emotional lever is powerful: the caller describes in detail how the victim's account is being actively drained by criminals as they speak, and that transferring funds is the only way to stop the loss. In reality, the victim is the one transferring funds to the criminal.
How this scam works on the PayPal brand
PayPal's genuine fraud-response process works entirely within PayPal's platform. If PayPal's systems flag unusual activity, they may temporarily limit the account — but the resolution happens through the PayPal Resolution Center and in-app notifications. PayPal has no 'escrow wallet' or 'secure holding account' that customers transfer funds into. PayPal staff would never ask a customer to withdraw their balance and re-send it elsewhere.
The real PayPal support channel is in-app chat and the Resolution Center at paypal.com. PayPal agents can verify account activity on their systems without needing the customer to move money. Any call claiming that moving money out of PayPal will protect it should immediately be treated as fraudulent.
Some attackers in this scheme also use PayPal's own 'Request Money' feature to send a payment request to the victim from a compromised or newly created PayPal account, framing it as a 'secure transfer to the investigation wallet'. The victim, believing they are complying with an official process, approves the request.
Common red flags
- A call from 'PayPal security' asking you to withdraw your balance and send it to a new account
- Any instruction to move money out of PayPal to protect it during an investigation
- A PayPal money request from an account you do not recognise, framed as a 'security transfer'
- The caller maintains urgency and asks you to stay on the line throughout the transfer
- You are told not to contact PayPal independently while the 'investigation' is active
- The receiving account is a personal account, not an official PayPal business entity
- The caller uses formal language and references internal PayPal case numbers that cannot be verified in the app
How to protect yourself
- Hang up and open the PayPal app or paypal.com to check for any real security notice
- Contact PayPal support directly through the Resolution Center — never via a number a caller provides
- Remember: PayPal will never ask you to transfer money out of your account to secure it
- Decline any PayPal money request you did not initiate, even if the requester claims to be PayPal
- Enable two-factor authentication so that account access requires your second factor too
- Tell a trusted family member or friend about the call before taking any financial action
- If you believe your PayPal account has been compromised, change your password and review activity in the app
How to report it
- Report the incident through the PayPal Resolution Center at paypal.com
- Forward details to [email protected]
- File a complaint with the FTC at reportfraud.ftc.gov
- If you transferred funds to a bank account, contact that bank immediately to attempt a recall
- Report to the FBI's IC3 at ic3.gov if financial loss occurred
Frequently asked questions
Does PayPal have a 'secure holding account' it can transfer your funds to?
No. PayPal does not operate customer-facing escrow or holding wallets for fraud investigations. Any instruction to send money to such an account is fraudulent. PayPal's fraud team works within its own systems — no customer transfer is required.
What should I do if I already wired money at PayPal's supposed instruction?
Contact your bank immediately to attempt a wire recall. Report the fraud to PayPal through the Resolution Center and to the FTC. Act as fast as possible — wire recalls have a narrow time window.
How can I tell if a PayPal money request is legitimate?
Check the requester's PayPal account carefully — a new account with no history is suspicious. PayPal's official processes never involve requesting money to an external account as part of a security investigation. Decline any unexpected request.