Report phishing to PayPal by submitting suspicious emails or websites through the official fraud reporting form at paypal.com/fraud. This process alerts PayPal's security team to investigate and block malicious activity targeting users.
Phishing attempts mimic PayPal's branding to steal login credentials, payment details, or personal information. These messages often claim urgent account issues, such as "suspension" or "unauthorized access," and direct users to fake login pages. Reporting them stops further victims from falling prey.
PayPal uses automated systems and human review to analyze reports. Verified phishing attempts lead to domain takedowns and user warnings. The platform processes reports within 24 hours and may notify affected users if compromised accounts are detected.
When you submit a phishing report to PayPal, the system logs the sender's email address, URL, subject line, and any attachments. PayPal cross-references this data against known scam domains and patterns. If matched, the site is blocked globally.
Reports are prioritized based on volume and severity. A single report from a user with a verified account may trigger faster action than multiple anonymous submissions. PayPal's Trust & Safety team reviews high-risk cases manually.
After submission, you receive a confirmation number. Save this for follow-up. PayPal does not respond individually to reporters unless additional information is needed.
Include the full email header, including the sender's address and timestamp. Copy the URL from the phishing page's browser bar-do not click links. Screenshots of the email body and the fake login page are required if available.
Do not forward the original phishing email. Instead, copy the entire message text into the report form. PayPal blocks spoofed addresses like "[email protected]" and "[email protected]." These domains often use slight misspellings to appear legitimate.
Example: An email titled "Your Account Will Be Suspended" sent from "[email protected]" contains a link to "https://secure-paypal-login.com/login.php." This URL resolves to a server in Ukraine with no SSL certificate. Submitting this report led to the domain being taken down within 18 hours.
Users often confuse PayPal's official communication with scams. Legitimate emails from PayPal include your full name, account ID, and a unique transaction reference. They never ask for passwords via email or redirect to non-.paypal.com URLs.
Another error is reporting fake PayPal sites without evidence. PayPal requires proof of deception-such as a login page that captures credentials or redirects to a non-PayPal domain. Reports without URLs or screenshots are closed automatically.
Some assume that forwarding phishing emails to [email protected] works. That address is reserved for network-level abuse, not user-submitted scams. Only the official form at paypal.com/fraud accepts phishing reports.
| Submission Method | Required Info | Response Time | Success Rate |
|---|---|---|---|
| Official form (paypal.com/fraud) | Email headers, URL, screenshot, confirmation number | Under 24 hours | 92% |
| Forwarding to [email protected] | Full email, no attachments | Unconfirmed; usually ignored | Less than 5% |
| Reporting via PayPal app | App-specific form, device ID | Same as web form | 91% |
According to PayPal's 2023 Security Report, 87% of phishing domains were removed within 48 hours of report submission. The company tracks over 1.2 million daily attempts to impersonate its services.
I reported a phishing email claiming my account was locked due to "suspicious activity." The sender used a near-identical PayPal logo and included a fake support number. I copied the email text, saved the URL, and submitted the report via paypal.com/fraud. Within 16 hours, PayPal confirmed the domain was blocked and sent me a notification.
Always verify the sender's domain. PayPal sends from @paypal.com or @paypal.co.uk. If the email comes from @paypal-support.net or @paypal-security.org, it is fraudulent. Use tools like Google's Safe Browsing API to test URLs before interacting.
Never enter login details on pages that don't start with https://www.paypal.com. Even if the site looks authentic, a missing padlock icon indicates unencrypted data transmission.
PayPal maintains a public list of known scam domains at paypal.com/security/scams. Check this list before clicking on any unfamiliar links. The site updates weekly and includes regional variations of common phishing tactics.
For ongoing protection, install browser extensions like uBlock Origin or Bitdefender's Anti-Phishing Tool. These block known malicious domains in real time and integrate with PayPal's threat intelligence feed.
Reporting phishing to PayPal is a critical step in maintaining internet safety. Your submission helps prevent others from losing money or identity data. Follow the official process-not guesswork-to ensure your report counts.