TLDR:
- PayPal email phishing scams use fake emails mimicking PayPal to steal login credentials and financial data via malicious links or fraudulent phone numbers.
- Common signs include generic greetings, urgent language, suspicious links or attachments, spoofed sender addresses, and poor grammar or typos.
- Recent 2026 scams in the UK include fake money requests exploiting PayPal’s legitimate features, targeted attacks using leaked email lists, and fake customer support numbers.
- If you have been targeted, act quickly by changing passwords, enabling two-factor authentication, and contacting your bank. WRS can assist with fund recovery where payments were made via a UK bank account.
PayPal is one of the most trusted online payment platforms in the UK, which unfortunately makes it a favourite target for scammers. Over the past few years, phishing emails pretending to be from PayPal have become a lot more professional. Countless individuals have told us that the email looked every bit like a legitimate PayPal communication.
At Wealth Recovery Solicitors (WRS), we work with people every day who have been caught out by these scams- often through no fault of their own. The emails are designed to create panic, urgency, confusion; so much so that even the most cautious of individuals could be misled.
This guide explains how these scam work, what to look out for, and what you can do if you’ve already interacted with one.
What is PayPal email phishing scam?
A PayPal phishing scam is essentially a fraudulent email (or text message) that is crafted to look like it came directly from PayPal. The branding is usually close to perfect: the logo, the colours, the layout, even the tone of the message. The aim is to get you to hand over something valuable- you login details, your financial information or, in some cases, a direct payment.
The message might claim that your account has been suspended, that there’s been suspicious activity, or that you need to “verify” your identity. The link within the message takes you to a fake PayPal login page and, once you enter your details, the scammers have full access to your account.
In other variations of the scam, the message includes a phone number of ‘PayPal support’. If you call the number, you’re connected directly to the scammers, who will then lead you through the steps that are designed to compromise your account.
We see these patterns repeatedly in the cases brought to WRS.
“The sophistication of PayPal phishing emails at present is unlike anything we’ve seen before. Scammers are no longer relying on obvious red flags – they’re using leaked data to personalise messages and exploiting legitimate PayPal features like money requests to bypass people’s instincts. At WRS, we speak to victims every week who tell us they genuinely believed the email was from PayPal. The key message is this: if an email creates urgency or asks you to act immediately, pause. That moment of hesitation is often the difference between staying safe and losing funds.” –Luke Caldwell, member of the Legal Team at WRS.
Common PayPal phishing email signs:
Although phishing emails have become more sophisticated, they still tend to be noticeable via small details.
One of the most reliable indicators is the sender’s email address or phone number. The emails/message may appear to have come from “PayPal support”, but the contact details will tell a different story. The examples that we’ve seen at WRS range from random Gmail accounts to domains that look almost perfect. PayPal’s official domains and contact numbers are all listed online so ensure that you check the details against PayPal’s official details.
The tone of the message is also another giveaway. Scammers rely heavily on urgency- warnings that your account will be closed, that you’ve been charged for something that you didn’t buy, or that you must act immediately are all indicators that the email is not legitimate. PayPal would never communicate with its customers in this manner.
Links can also be revealing. They may look legitimate, but hovering over them usually exposes a strange or unfamiliar web address. PayPal does not send attachments to customers when asking them to verify their accounts, yet phishing emails will often include these.
Finally, how the email addresses you can be another giveaway. PayPal normally uses your full name. Scammers rarely have that information, so they fall back on vague greeting like “Dear User” or “Dear Customer”.
It is also worth looking out for spelling mistakes, grammatical errors, or awkward phrasing. Legitimate PayPal communications are professionally written, and noticeable typos or poor grammar are often a clear indicator that an email is fraudulent.
Recent PayPal scams in the UK (2026)
Scammers adapt quickly, and 2026 has brought a few notable trends.
One of the most common is the fake money request. Because PayPal’s money request feature is legitimate, scammers exploit it by sending fabricated invoices: subscription renewals, security fees, even crypto-related charges. The request looks official, and many people pay it before realising it wasn’t genuine.
Another trend involves targeted attacks using leaked email lists. Scammers are selecting individuals who are more likely to have PayPal accounts, and they often personalise the emails just enough to make them feel authentic.
We’ve also seen a rise in phishing emails that include fake customer support numbers. Victims call the number, believing they’re speaking to PayPal and then are guided through steps that ultimately compromise their account or lead to direct payments.
Subscription cancellation scams are also common: emails claiming that you’ve been charged for antivirus software or streaming services, urging you to call a number to dispute the charge. Again, the number leads straight to the scammers.
These are exactly the types of cases that WRS have been helping clients navigate through the year.
Wealth Recovery Solicitors impersonations warning:
Because WRS is known for assisting victims of online fraud, we have been seeing an increase of scammers using our name and credentials to attempt to scam individuals out of their funds.
This issue has been reported to and addressed by the Solicitor’s Regulation Authority, who regularly publish warning regarding such matters which can be found at: SRA | Scams round up | Solicitors Regulation Authority
All members of our firm (along with their contact details) are listed on the ‘Our People’ section of our website for individuals to check:
https://wealthrecovery.co.uk/people/
All of our official email addresses end with @wealthrecovery.co.uk, any emails that claim to be WRS that do not end in this are a scam.
What to do if you clicked a phishing link:
If you’ve clicked a link or entered your details, don’t panic; but do act quickly.
Start by changing your PayPal password. If scammers have captured your login details, this will immediately cut off their access. It is also wise to enable two-factor authentication, if you haven’t already.
Next, log into your PayPal account and check your recent activity. Look for transactions you don’t recognise, new linked cards, or changes to your personal information. If anything looks suspicious, report it to PayPal straight away.
It is also worth running a security scan on your device. Some phishing links can install malware designed to capture further information.
If you entered bank or card details, contact your bank as soon as possible. They can freeze or replace your card and monitor fraudulent activity.
If you’re unsure what to do or feel overwhelmed, WRS can help you understand your position and guide you through the next steps.
Recover funds from PayPal phishing scam:
Whether funds can be recovered depends on how the scam occurred, but many victims have more options than they initially realise.
If the transaction was unauthorised- meaning that the scammer accessed your account and sent money without your consent- PayPal will typically refund these cases once they can confirm that the transaction was not done by you.
If you authorised the payment yourself, believing it to be legitimate, the situation becomes more complex. However, recovery is still possible in some circumstances. WRS regularly assists client in challenging these transactions, presenting evidence of deception and pursuing chargebacks through their banks where appropriate.
It is important to note that WRS can only assist where funds have been transferred via a UK bank account, as this allows us to utilise established recovery mechanisms. We cannot directly recover funds that were sent solely through PayPal’s internal payment system, though we can offer some guidance on how to escalate your complaint with PayPal.
To find out more about how we can help, visit our internet and online scam recovery page.
Prevention tips:
A few simple habits can significantly reduce your risk of falling victim to a phishing scam. Avoid clicking unexpected links, especially in email that create a sense of urgency. Use strong, unique passwords and enable two-factor authentication wherever possible. Keep your devices updated, and if you received a money request- even if this is from someone you know- take a moment to verify it directly with them.
If you have already been targeted, WRS is here to help you understand your options and take the next steps towards recovery. Start your claim today.
FAQs:
How do I spot a PayPal email phishing scam?
Look for unusual greetings, urgent language, suspicious links and send addresses that don’t match PayPal’s official domain. If anything feels out of place, it is best to avoid interaction with the email.
What to do after a PayPal phishing scam?
Change your password, enable two-factor authentication, check your account activity, contact your bank if necessary, and report the email to PayPal. WRS can help you assess your situation and guide you through the recovery process.
Can I recover money from PayPal scams?
Yes, depending on the circumstances. WRS assist clients with bank-based recovery routes, chargebacks and evidence preparation to maximise the chances of a successful outcome.
Are there PayPal impersonation scams?
Yes. Scammers frequently impersonate PayPal support send fake money requests or create convincing phishing emails.
Is Wealth Recovery Solicitors legitimate?
Yes- WRS is an SRA regulated UK firm specialising in online fraud and fund recovery. We do not cold-call or request upfront fees. Always verify contact details via our official website (https://wealthrecovery.co.uk/people/) or by emailing us directly on enquiries@wealthrecovery.co.uk.