PayPal users warned of renewed invoice scam, company says do not pay, do not phone

Security researchers have flagged a fresh wave of PayPal invoice scams that use genuine PayPal email infrastructure to deliver fake billing notices. The warning, from KnowBe4 analysts, urges users to ignore unexpected invoices and to avoid calling phone numbers listed in the messages. PayPal said it is aware of the campaign and advised customers to contact support only through the PayPal app or official website.

How the scam works

Attackers create PayPal accounts and generate bogus invoices for large purchases the recipient did not make. The email arrives from a real PayPal address, which can lower suspicion. It typically includes a phone number to dispute the charge. Calling that number connects victims to a fraudster posing as PayPal support. The caller is then pressured to share card details for a fake refund, to pay a fee to secure the account, or to install remote access tools.

This pattern is a telephone oriented attack delivery tactic, often paired with attached PDFs and urgent language. The invoice exists inside PayPal, but it is fraudulent. The support line in the message is not PayPal.

PayPal’s response

PayPal said it does not tolerate fraudulent activity and is taking steps to limit scam accounts and block risky transactions. The company reiterated simple guidance. Do not pay unexpected invoices. Do not call numbers in suspicious emails. If in doubt, open the PayPal app or go to the official Contact page and speak to support there.

What users should do now

• Do not interact with unexpected invoices. Do not click, do not call, do not pay.

• Log in directly, type paypal.com in your browser or use the app. Check the Activity tab. Cancel any fraudulent invoice from within PayPal if the option is available.

• Report the message by forwarding it to [email protected], then delete it.

• Never share card numbers, one time codes, or install software at the request of a caller.

• Enable multi factor authentication in your PayPal account. Review linked cards and bank accounts, and remove any you do not recognise.

• Monitor statements for unauthorised charges. Dispute any unfamiliar transactions with your bank and with PayPal.

Criminals continue to recycle familiar social engineering lures because they work. Treat any high value invoice that you did not expect as suspicious, verify in the app, and use only official support channels.

Photo Credit: DepositPhotos.com