Common PayPal Scams Targeting Sellers (+How to Spot Them)
Key Takeaways
- Phishing remains the single most common PayPal attack vector.
- Scammers can send genuinely real-looking fake invoices through PayPal’s own infrastructure.
- A “payment confirmation” email isn’t proof of payment; your actual account is.
- Overpayment scams increasingly use stolen cards, adding a chargeback risk on top of the refund trick.
- AI voice-cloning scams impersonating PayPal support are a real, fast-growing 2026 threat.
- Seller Protection has real limits worth understanding before you assume a scam is automatically covered.
A lot of advice about PayPal scams focuses on spotting a suspicious order: a weird shipping address, an unusual transaction size, a rushed shipping request. That’s genuinely useful, and we cover those order-level red flags in depth elsewhere. This guide covers something different: scams aimed directly at you, the seller, through fake communications, impersonation, and manipulated payment confirmations, rather than through a suspicious order itself.
This is what’s in store:
[25 px spacer]
How Common Are PayPal Scams?
PayPal’s sheer scale (439 million active accounts worldwide) makes it a consistent target, and phishing specifically remains the most reported attack vector year over year.
What’s shifted more recently is sophistication: scammers increasingly use PayPal’s own real infrastructure to send fraudulent invoices and payment requests, and newer threats like AI voice-cloning are starting to show up in fake support calls, making some scams harder to spot on sight than the obviously-fake phishing emails of a few years ago.
You might also like: Download Free PayPal Dispute Resolution Templates
7 Scams That Target Sellers Directly
From phishing to friends and family payment pressure, here are seven types of PayPal scams to watch out for. For each, you’ll find a way to prevent it from impacting you.
1. Phishing Emails & Fake Login Pages
The scam: an email claiming to be from PayPal, warning of a locked account, a security issue, or an unauthorized transaction, with a link to a fake login page built to steal your credentials. This remains the single most common PayPal-related scam reported.
The fix: never click a link in an unexpected PayPal email. Log into PayPal directly through your browser or app instead, and check your account activity there.
2. Fake Invoices Sent Through PayPal’s Real System
This one’s more sophisticated than a basic phishing email, since the invoice itself can arrive through PayPal’s own legitimate infrastructure, which makes it look authentic even to a careful eye. A scammer creates a PayPal account, sends you an invoice or payment request that looks completely standard, and the fraud is in what the invoice is actually for, not in the email being fake.
The fix: treat any invoice or payment request the same way you’d treat an unexpected order, verify what it’s actually for before acting on it, regardless of how legitimate the formatting looks.
3. Fake Payment Confirmation Emails
A scammer sends you an email designed to look exactly like PayPal’s “you’ve been paid” notification, hoping you’ll ship the item before checking your actual account balance. No payment ever landed.
The fix: a confirmation email is never proof of payment. Check your real PayPal balance or activity feed directly before fulfilling any order, every time, regardless of how convincing the email looks.
4. Overpayment & “Refund the Difference” Scams
A buyer pays more than the order costs, then asks you to refund the difference, often citing a “mistake” or “technical error.” You refund it, and the original payment later reverses, sometimes because it was made with a stolen card in the first place, leaving you out both the refund and the merchandise.
The fix: no legitimate buyer accidentally overpays and needs a manual refund of the difference. Treat any overpayment request as a red flag by default, and if you want to resolve it generously, cancel and fully refund the original order instead of sending a separate, partial refund.
5. Fake Tech Support & Impersonation Calls
A call or message claims to be from PayPal support, often citing a fabricated account problem, and walks you through “verifying” your account in a way that actually hands over access. AI voice-cloning is starting to show up in this category too, making some calls sound more convincing than the scripted, obviously-foreign-call-center scams of a few years back.
The fix: PayPal doesn’t call you out of the blue asking for your password, verification codes, or remote access to your device. If you’re unsure whether a call is legitimate, hang up and contact PayPal directly through its official site instead of calling back a number the caller gave you.
6. Shipping & Address Manipulation
Related to, but distinct from, the order-pattern red flags covered in our other guide: some scams specifically target the shipping step itself, asking you to reroute a package after the original transaction clears, or disputing a delivery to an address you were asked to change after the fact. Safeship can automate shipping address validation if this becomes a recurring problem, though it currently requires Shopify Plus with Checkout Extensibility enabled.
7. Friends & Family Payment Pressure
Some buyers, legitimate and otherwise, will ask to pay via Friends & Family to avoid fees. The problem: Friends & Family payments carry no Purchase Protection for either side, meaning you have far less recourse if something goes wrong, and so does the buyer. Legitimate business transactions should go through Goods & Services, full stop, even if a buyer pushes back on the fee.
What Seller Protection Actually Covers
PayPal’s Seller Protection program covers eligible transactions, generally item-not-received and unauthorized-transaction claims, when you ship to the confirmed address on the order with tracking. It doesn’t reliably cover “significantly not as described” disputes, digital goods, or Friends & Family payments, regardless of how clear-cut the fraud looks from your side.
| Scenario | Typically Covered? |
|---|---|
| Item not received, shipped with tracking to the confirmed address | Yes |
| Unauthorized transaction (stolen card/account used to pay you) | Yes, generally |
| “Significantly not as described” disputes | Often not covered |
| Digital or intangible goods | Generally not covered |
| Friends & Family payments | Never covered |
Be sure to check PayPal’s current Seller Protection terms directly, since eligibility details can change.
If you deal with chargebacks regularly regardless of the cause, Chargeflow can automate dispute response on a success-fee basis. See our full Chargeflow review for details, and our guide to the order-level fraud signals worth watching for before a scam order ever ships.
Final Thoughts
The scams covered here share one thing in common: they target your trust in a familiar communication, an email, an invoice, a phone call, rather than tricking you through a suspicious order itself. Verifying directly through your own PayPal account, rather than trusting whatever a message claims, is the single habit that defeats nearly all of them at once.
To ideate, plan, and launch an online business from scratch, claim your free Aurajinn launch dashboard today.
Frequently Asked Questions About PayPal Scams
Is PayPal safe to receive money from strangers?
Generally yes, for standard Goods & Services transactions with tracking. The risk isn’t PayPal itself; it’s the specific scam tactics covered here, most of which target the communication around a payment rather than PayPal’s own systems.
How do I know if a PayPal email is real?
Don’t click links in the email itself. Log into PayPal directly through your browser or app and check your actual account activity there. If what the email describes doesn’t match what you see in your real account, the email is fake.
Will PayPal refund me if I’m scammed?
It depends on the scenario. Sellers are covered under Seller Protection for eligible item-not-received and unauthorized-transaction claims shipped with tracking to the confirmed address. Coverage is far less reliable for “not as described” disputes, digital goods, and Friends & Family payments.
What’s the most common PayPal scam right now?
Phishing remains the most frequently reported attack vector, though fake invoices sent through PayPal’s own real infrastructure and AI-assisted impersonation calls are both growing fast enough to be worth taking seriously too.
Turn your business idea into a step-by-step launch plan
Free guided checklists and workspaces built for first-time founders.
Chad is a Freelance Copywriter & the Founder of Jensen Copy. He's an expert in SaaS, technology, and travel (he's also done data center network maintenance, underwater repair, and CDL driving professionally). He's best known for providing a humorous, knowledgeable, no-B.S. view to everything he writes. Plus, he's fun to drink with -- Maybe he'll buy you a beer sometime and tell you some stories that should probably never be printed.
