Fake PayPal Payment Email Script
Fake payment or invoice emails impersonating PayPal-style services to trigger a panicked call or login on a phishing page.
Last reviewed: 1 June 2026
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
You sent [amount] to [unknown recipient]. If you didn't authorise this, call [phone number] immediately.
Invoice [number]: [amount] is due. To dispute, log in here: [fake link]
Your account is limited until you confirm your details: [fake link]
What the scammer wants
To make you panic and call a fake 'support' number (leading to a refund/remote-access scam) or log in on a phishing page that steals your credentials.
Red flags in the message
- Alarming 'you paid someone' or 'account limited' message
- A phone number to call to 'cancel' a payment
- Login links to non-official domains
- Requests for password, card details, or codes
A safe response
Don't click links or call numbers in the email. Log in to your account by typing the official address yourself, and check directly. Report the email as phishing.
What not to send
- Login credentials
- Card details
- One-time codes
What to do if you already replied
- Change your password and enable strong 2FA
- If you called and gave access or details, disconnect and contact your bank
- Report the phishing email
Evidence to preserve
- Screenshot the full message or call details
- Note the sender number, email, or profile
- Save any links (without clicking) and payment details
- Record dates and times