High riskEmail

Payment Confirmation Email Scam

This scam emails a fake payment or order confirmation for something you did not buy, prompting you to call a number or click a link to 'cancel' or 'dispute' it, leading to a scammer or a phishing page.

Quick verdict

Risk level
High risk
Scam type
Fake-receipt / call-back phishing
Main red flag
A confirmation for a payment or order you never made, with a number or link to dispute it.
What to do first
Do not call or click. Check your real accounts and statements directly.

Understanding this scam

This scam emails a fake payment or order confirmation for something you did not buy, prompting you to call a number or click a link to 'cancel' or 'dispute' it, leading to a scammer or a phishing page.

Email scams, or phishing, remain one of the most common ways criminals steal logins, payment details, and money. A convincing message imitates a brand or contact and steers you toward a fake login page, a malicious attachment, or a fraudulent payment.

If you take one thing from this guide, make it this: A confirmation for a payment or order you never made, with a number or link to dispute it. Do not call or click. Check your real accounts and statements directly.

If your message looks slightly different, check the Geek Squad Renewal Email Scam or the Fake PayPal Email Scam, both are close cousins of this pattern. Every related guide lives in the Email Scams guides, and the scam checker can scan the text you received.

A typical example

Example pattern, not a real report
Example pattern: 'Thank you for your payment of $499.99. If you did not authorise this, call us or cancel here within 24 hours: [number or suspicious link]'

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

The tell here: A confirmation for a payment or order you never made, with a number or link to dispute it.

What the data shows

Most reported
phishing was the most common type of cybercrime complaint reported to the FBI in 2023
$12.5B
total reported internet-crime losses in the US in 2023

Warning signs

  • A confirmation for a purchase you did not make
  • A phone number or link to dispute or cancel
  • A large amount designed to alarm you
  • Generic details with no genuine order number
  • Pressure to act within hours

Your safest response

  • Check your bank and account statements directly
  • Log in to real accounts through official sites to confirm no charge exists
  • Report the email as phishing and delete it
  • Ignore the dispute number or link

If you have already engaged

  • If you called and installed software, remove it and run a scan
  • If you shared card or bank details, contact your bank immediately
  • Change passwords from a trusted device if you gave anyone access
  • Watch for follow-up 'refund' calls

What to avoid

  • Do not call the dispute number in the email
  • Do not install software a 'support agent' requests
  • Do not enter details on the linked page

You might also see

Questions people ask

Why send a fake payment confirmation?
Alarm at an unexpected charge makes people call or click to 'cancel', where a scammer can request remote access, payment, or login details.
I never made this payment. Is it real?
That is the trick. Check your actual statements and accounts directly; do not use the number or link in the email.
I called and gave details. What now?
Contact your bank immediately, remove any software you installed, change passwords from a trusted device, and watch for follow-up calls.
How do I verify a real charge?
Log in to your bank and accounts through official apps or websites, never through a link or number in the email.

Last reviewed June 2026 · Written & reviewed by the

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.