~/scams explained / paypal-phishing-email-scam
Fake PayPal email: "Account limited" and "suspicious payment"
An email says your payment account is limited or that there is a suspicious payment. It is a fake message in PayPal's name that wants to capture your login details.
Got a specific message?
Paste the text into the scam check and get an assessment in seconds, no sign-up.
How the scam works
- You get an email that claims to be from PayPal: "Your account has been limited" or "Suspicious payment detected".
- You are told to confirm your identity or check the payment, or the account will be closed for good.
- The link leads to a copied sign-in page that looks like the original.
- There you enter your email address and password, sometimes card details or a security code.
- The criminals log in with your details, approve payments or use your account for further scams.
How to spot it
- The email does not address you by your name.
- You made no payment, yet the mail talks about a "suspicious" one.
- The sender address looks strange or does not fit the service.
- There is a short deadline after which the account will supposedly be closed.
- You are asked to give a password, card details or ID photos through a link.
- The email has spelling mistakes or a blurry logo.
What to do now
- Do not click the link and do not open attachments.
- Open the official app or website of the payment service yourself and look for messages there.
- Never type passwords, security codes or card details through a link in an email.
- Switch on two-step sign-in for your account if you can.
- Delete the email and report it as phishing in your mail program.
Already clicked or paid?
- Only clicked: close the page, enter nothing and scan your device for malware.
- Entered login details: change the password at once, and everywhere else you use the same one.
- Gave card details: call your bank using the number on the card and have the card blocked.
- Check your account activity, report it to the police and keep the email.
Frequently asked questions
How do I check whether my account is really limited?
Open the official app or type the service's address into your browser yourself. Real notices appear there in your account.
I replied to the email. Is that bad?
Replying shows the criminals that your address is active. Do not reply again, change your password to be safe and stay alert.
Can I forward the email?
Only forward it to official reporting services, not to friends. A screenshot without the link is enough to warn them.
More scams
- Fake parcel text: "Delivery failed"
- Fake bank email: "Account locked" and "renew your security method"
- Fake Amazon email: order, Prime, locked account or refund
- "Hi Mum, new number": the WhatsApp scam with the fake child
- Classified ads scam: the fake buyer with the "secure payment link"
- How to spot a fake online shop
- Prize draw scam: why "You have won" is often a trap
- Fake Microsoft support: the phone call and virus pop-up scam
- Fake bank employee call: when the bank seems to be calling
- Crypto investment scam: fake ads with famous faces
- Tax refund phishing: fake emails from authorities
General advice, not legal advice. If you lost money, involve your bank and the police.