Skip to content
ZeroScam
ZeroScam
SCAM📋 Email Scam Pattern✉️ EMAILHigh risk

Fake PayPal Invoice Email Scam

PayPal invoice scams exploit a loophole: scammers open real PayPal accounts and send genuine PayPal invoices with fake callback numbers. The email bypasses spam filters because it genuinely comes from PayPal's servers. PayPal officially states it never includes phone numbers in invoices.

Reports

FTC 2024: PayPal 3rd most impersonated company; part of $12.5B fraud losses

First documented

2021

Last active

2026-03

⚠ This page documents a reported scam email pattern for educational purposes. Sources are cited for all statistics and claims. ZeroScam is not affiliated with the IRS, FTC, FBI, or any government agency.

What this scam email says

Scammer sends a real PayPal invoice from their account for an item you never ordered. The invoice note says 'Don't recognize this purchase? Call [phone number] immediately.' Calling the number connects to a fake PayPal agent who requests your credentials or remote access.

What this scam email looks like

Email preview — reconstructed example
From: [email protected] [legitimate PayPal server — scam is in the note]
Subject: Invoice from [Fake Company Name]

You have a new invoice from [Fake Company Name]

Amount: $499.99
Due: Immediately

Note from seller: 'Did not authorize? Call 1-888-XXX-XXXX to cancel.
This charge will be finalized in 12 hours.'

[Pay Now] [View Invoice]

PayPal — You're protected by PayPal Purchase Protection

Reconstructed example for educational purposes. Not a verbatim reproduction.

Known scam email subject lines in this pattern

  • Invoice from [company name]
  • You've authorized a payment — don't recognize this?
  • Payment request from [name] — review now
  • Unauthorized transaction alert — call to dispute
  • Money request requires your attention

4 red flags

1

PayPal official policy: PayPal never includes phone numbers in invoices

2

Email bypasses spam filters — it genuinely comes from PayPal's servers

3

FTC 2024: PayPal was the 3rd most impersonated company

4

All PayPal disputes are handled at paypal.com/disputes — never by phone

What to do

Do not call the number in the invoice

Log in at paypal.com directly to check your real transactions

Report to [email protected]

Report to FTC at reportfraud.ftc.gov

Report this email scam

Source

PayPal official security page — invoice callback pattern; FTC 2024 data spotlight — PayPal 3rd most impersonated company

https://www.paypal.com/us/cshelp/article/what-are-common-scams-and-how-do-i-spot-them-help201

Fake sender domains used in this scam

Scammers impersonate legitimate brands using these fraudulent domains. If you received an email from one of these, it is a scam.

paypal-security-center.compaypal-billing-alert.netpaypal-invoice-dispute.compaypal-account-verify.orgpaypal-support-team.net

Documented email subjects in this pattern

People also search for

Frequently asked questions

What is the Fake PayPal Invoice Email Scam?

PayPal invoice scams exploit a loophole: scammers open real PayPal accounts and send genuine PayPal invoices with fake callback numbers. The email bypasses spam filters because it genuinely comes from PayPal's servers. PayPal officially states it never includes phone numbers in invoices.

How do I recognize a Fake PayPal Invoice Email Scam?

Red flags: PayPal official policy: PayPal never includes phone numbers in invoices; Email bypasses spam filters — it genuinely comes from PayPal's servers; FTC 2024: PayPal was the 3rd most impersonated company.

What should I do if I receive a Fake PayPal Invoice Email Scam?

Do not call the number in the invoice Log in at paypal.com directly to check your real transactions Report to [email protected]

How common is the Fake PayPal Invoice Email Scam?

FTC 2024: PayPal 3rd most impersonated company; part of $12.5B fraud losses. First documented: 2021. Source: PayPal official security page — invoice callback pattern; FTC 2024 data spotlight — PayPal 3rd most impersonated company.

Received a suspicious email?

Paste the email text or subject line — check it instantly, free.

Check your email →

Source: PayPal official security page — invoice callback pattern; FTC 2024 data spotlight — PayPal 3rd most impersonated company

First documented: 2021 · Last active: 2026-03

← Scam message database