Medium riskEmail

PayPal Invoice Scam

In a PayPal invoice scam, a fraudster uses PayPal's own invoicing or money request feature to send you a genuine-looking bill for a purchase you never made. The message often includes a "call this number to dispute" note that connects you to a fake support line, where you may be pressured to pay, share account access, or move money. Because the email can come from PayPal's real systems, it can look very convincing.

Quick verdict

Risk level
Medium risk
Scam type
Payment request phishing scam
Main red flag
An invoice or money request for something you did not buy, paired with a phone number urging you to call to cancel or dispute it.
What to do first
Do not call the number in the message. Log in to PayPal directly to see whether any real invoice or request exists on your account.

Understanding this scam

In a PayPal invoice scam, a fraudster uses PayPal's own invoicing or money request feature to send you a genuine-looking bill for a purchase you never made. The message often includes a "call this number to dispute" note that connects you to a fake support line, where you may be pressured to pay, share account access, or move money. Because the email can come from PayPal's real systems, it can look very convincing.

Email scams, or phishing, remain one of the most common ways criminals steal logins, payment details, and money. A convincing message imitates a brand or contact and steers you toward a fake login page, a malicious attachment, or a fraudulent payment.

If you take one thing from this guide, make it this: An invoice or money request for something you did not buy, paired with a phone number urging you to call to cancel or dispute it. Do not call the number in the message. Log in to PayPal directly to see whether any real invoice or request exists on your account.

If your message looks slightly different, check the Fake PayPal Email Scam or the PayPal Payment Pending Scam, both are close cousins of this pattern. Every related guide lives in the Email Scams guides, and the scam checker can scan the text you received.

A typical example

Example pattern, not a real report
Example pattern: "Invoice from a tech support service. Amount due: GBP 399.00. If you did not authorise this charge, call our billing team immediately on the number below to cancel before it is processed."

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

The tell here: An invoice or money request for something you did not buy, paired with a phone number urging you to call to cancel or dispute it.

What the data shows

Most reported
phishing was the most common type of cybercrime complaint reported to the FBI in 2023
Source: FBI Internet Crime Complaint Center
$12.5B
total reported internet-crime losses in the US in 2023
Source: FBI Internet Crime Complaint Center

Warning signs

  • An invoice or money request appears for a product or service you never ordered.
  • A phone number is provided and you are urged to call quickly to dispute or cancel the charge.
  • The note field contains pressure, threats of an automatic charge, or scare wording rather than normal billing details.
  • The "seller" name is vague, such as a generic support or security service, with no clear business behind it.
  • You are pushed to act in minutes and discouraged from checking your PayPal account first.

Your safest response

  • Open PayPal directly in your browser or app and check whether the invoice or request actually exists on your account.
  • If it is there, decline or cancel the request inside PayPal rather than paying or calling any number.
  • Find PayPal's real contact details from inside your logged-in account if you need help, not from the email.
  • Report the message to PayPal as a suspicious invoice so it can investigate the sender.

If you have already engaged

  • If you called the number and shared any details, stop contact and change your PayPal password right away.
  • Turn on two-factor authentication and review your PayPal activity for unfamiliar payments or linked accounts.
  • If you were guided to install remote access software, disconnect from the internet and have the device checked before using it again.
  • Contact your bank or card provider if you sent money or shared card or banking details during the call.

What to avoid

  • Do not call the phone number printed in the invoice or note field.
  • Do not pay an invoice to make it "go away"; an unpaid fake request cannot take money from you on its own.
  • Do not let anyone on a support call talk you into installing software or sharing one-time codes.

You might also see

High risk Email

Fake PayPal Email Scam

This scam sends an email claiming your PayPal account is limited or shows unusual activity, urging you to 'confirm' your details through a link that leads to a fake login page designed to steal your password.

Created by Scam or Safe Editorial Team
High risk Bank & Payment

PayPal Payment Pending Scam

This scam shows a fake 'payment on hold' message claiming funds will be released once you ship an item or confirm details, but no real payment exists.

Created by Scam or Safe Editorial Team
Medium risk Email

Fake Invoice Email Scam

This scam emails an invoice or receipt for something you did not buy, hoping you call a fake 'support' number or click a link to dispute it.

Created by Scam or Safe Editorial Team

Questions people ask

How can a scam invoice come from PayPal's real address?
Anyone with a PayPal account can send an invoice or money request, and PayPal's system emails it from its own domain. The email being genuine does not mean the invoice is legitimate. Always check the request inside your account before acting.
Will I be charged automatically if I ignore the invoice?
An unpaid invoice or money request does not pull money from your account by itself; you would have to approve a payment. The claim that you will be charged automatically is a common pressure tactic, so it is usually safe to verify first before doing anything.
How is this different from a fake PayPal login email?
A fake login email tries to send you to a copycat sign-in page to steal your password. An invoice scam often uses PayPal's real invoicing and steers you to a phone line instead. Both rely on urgency, so checking directly in PayPal is the safe response to either.
I called the number before realising. What should I do?
Change your PayPal password, enable two-factor authentication, and review recent activity. If you shared card or bank details, gave a one-time code, or installed any software, contact your bank and have the device checked, as these are common goals of the fake call.

Last reviewed June 2026 · Written & reviewed by the

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.