Verify a PayPal invoice before you click pay.
Scammers frequently abuse PayPal's actual invoice system to send fake bills for services you never ordered. Check the invoice before you let a trusted payment platform lower your guard.
Security Insight
Because scammers can use genuine PayPal accounts to send invoices, the email often comes from 'service@paypal.com', making traditional sender checks useless. The scam is in the notes section.
Why PayPal invoices deserve extra scrutiny
The most common PayPal scam doesn't involve hacking your account. Instead, scammers send an official PayPal invoice with a fake customer service number in the 'Seller Note', urging you to call and cancel the fraudulent charge.
The invoice is for a service you didn't buy
The email claims your account is limited
The seller note contains a phone number
You are asked to pay via 'Friends and Family'
What IsThisSpam checks before you trust a sender
Quick verdicts are useful, but the real value is understanding why something looks safe, uncertain, or risky.
Sender email vs actual invoice
If an email claims you paid for something, but logging into your PayPal account (not clicking the link) shows no activity, the email is a phishing attempt.
Impersonation patterns
Scammers often create PayPal business accounts with names like 'Geek Squad Billing' or 'Coinbase Support' to make their official invoices look real.
High-pressure tactics
24-hour cancellation deadlines and warnings about unauthorized activity are designed to panic you into calling their fake support center.
Context from the full message
The PayPal logo is important, but the request to call a phone number to dispute a charge is what moves an invoice to clearly dangerous.
Related guides
Use the checker for the fast answer, then read the deeper guidance for recurring scam patterns.
The Anatomy of a PayPal Invoice Scam
How to Spot a Fake PayPal Security Alert
FAQ
These are the questions people usually ask right before they click, reply, or pay.
Check the sender before you trust the message.
Start with a fast scan, then move to SuperScan when the message involves money, account access, or sensitive documents.