2. PayPal

Brand imposter · PaymentsJuly 2026

PayPal was an early mover in digital payments with deep roots in online commerce and broad reach with close to 100 million users in the US alone. Sitting directly on top of people's money means when their brand is impersonated, it's a much easier move from deception to extracting funds.

How PayPal is being impersonated

Popular impersonation lures to pay attention to:

Unauthorized-charge alerts

An email or text reports a $400–$900 charge (often for crypto or electronics) and urges you to call immediately if you didn't authorize it. The call ends in remote access or a "refund" that drains the account.

Real invoices, fake debts

The nastiest variant abuses PayPal itself. Scammers send genuine invoices or money requests through PayPal's own invoicing system, so the email really comes from paypal.com and sails past spam filters. The scam lives in the invoice note: "if you did not authorize this charge, call…"

Account-frozen phishing

"Suspicious activity" messages that push you to a lookalike login page to harvest your PayPal credentials.

Second channel checks

When you want to be sure

1
Log in directly and check Activity.
Type paypal.com (or open the app) and look at Activity. A real hold, charge, or dispute will be there. An invoice you don't recognize can simply be ignored or canceled — receiving it costs you nothing.
2
Never call the number in an invoice or email.
PayPal's real contact channels are at paypal.com/contact — use those or the app's Message Center.
3
Forward suspicious messages, then delete them.
Forward suspicious messages to phishing@paypal.com, then delete them. If you already called and granted access or paid, contact your bank immediately and change your PayPal password from a different device.

2. PayPal

How PayPal is being impersonated

Unauthorized-charge alerts

Real invoices, fake debts

Account-frozen phishing

Second channel checks

Log in directly and check Activity.

Never call the number in an invoice or email.

Forward suspicious messages, then delete them.

Similar impersonated brands

Cash App

McAfee