What PayPal refund scams actually are
PayPal refund scams are schemes where someone tricks you into sending money by pretending to refund you for something you never bought, or by creating a fake refund notification that looks real. The scammer's goal is to get you to wire money back, send gift cards, or hand over personal information they can use to drain your account. Unlike a real PayPal refund—which PayPal itself processes—these scams involve a person impersonating PayPal or a seller, and they move fast.
The most common version works like this: you receive a message (email, text, or through PayPal's app) saying a refund is pending, but there's a problem. Maybe the refund is "stuck" and you need to confirm your identity. Maybe it says you received money by mistake and need to send it back. Maybe it claims suspicious activity on your account. The message includes a link that looks like PayPal's real website, or asks you to call a phone number. Once you click or call, the scammer either steals your login information or convinces you to send money to "complete" the refund.
Key Takeaways
- PayPal never asks you to confirm your password, send money, or click links in unsolicited messages—real refunds process automatically in your account.
- Scammers create fake PayPal websites and fake text messages that look identical to the real thing, so checking the sender's email address or phone number is your first defense.
- If you've already sent money or given information, contact PayPal's Resolution Center immediately and report the message to the Federal Trade Commission.
- The most dangerous refund scams ask you to wire money, buy gift cards, or use a money transfer app—these methods cannot be reversed once sent.
How to spot a fake PayPal refund message
Real PayPal refunds appear in your account automatically. You do not receive a message asking you to do anything. If you get a message about a refund, check the sender first. PayPal's official email addresses end in @paypal.com or @service.paypal.com. If the email comes from any other address—even one that looks close, like @paypa1.com or @paypal-security.com—it is fake. Scammers often use addresses that are one letter off.
Text messages claiming to be from PayPal are almost always scams. PayPal does send some text alerts, but only if you turned on text notifications in your account settings. Even then, PayPal's texts never include links or ask you to take action. If a text says "Click here to confirm your refund" or "Verify your account," it is a scam. The same rule applies to pop-up messages inside the PayPal app itself—PayPal's real notifications appear in your account history, not as urgent pop-ups.
Fake refund pages look nearly identical to PayPal's real login page. The URL matters. Hover over any link before clicking it—your browser will show you where it actually goes. Real PayPal links start with https://www.paypal.com. If the link goes anywhere else, or if the URL has extra words or numbers (like https://www.paypal-verify.com), do not click it. When in doubt, close the message and log into PayPal directly through your browser or the official app instead.
The most dangerous refund scam tactics
The most effective scams ask you to send money using a method that cannot be reversed. Wire transfers, money transfer apps like Venmo or Cash App, and gift cards are the scammer's preferred payment methods because once the money leaves your account, it is gone. A scammer might tell you that you received a refund by mistake and need to send it back immediately, or that there is a "processing fee" to unlock your refund, or that you need to pay a deposit to verify your identity before the refund goes through.
Another dangerous tactic is the "overpayment" scam. A scammer sends you a fake PayPal payment notification saying someone paid you too much for an item you sold. They ask you to refund the difference. You send the money, and then days later, PayPal tells you the original payment was fraudulent. You are now out the money you sent back, and the scammer is gone. This works because it plays on your instinct to do the right thing—you think you are returning money that was sent to you by mistake.
Phishing for your login information is equally dangerous. A fake message says your account has suspicious activity and you need to "verify" your identity by clicking a link and entering your email and password. Once the scammer has your login, they can change your password, drain your balance, link their own bank account to your PayPal, and use your account to scam other people. This can take hours to undo.
What to do if you think you have been scammed
If you clicked a link and entered your PayPal password, change it immediately. Log into PayPal directly (not through any link in a message) and update your password to something long and unique. Then check your account activity for any unauthorized transactions. Look at your linked bank accounts and credit cards to see if the scammer added their own payment method. If you see anything suspicious, remove any payment methods you do not recognize.
If you already sent money to a scammer, the next step depends on how you sent it. If you used PayPal's own payment system (sending money to another PayPal user), go to your Resolution Center and report the transaction as unauthorized or fraudulent. PayPal may be able to reverse it if the scammer has not withdrawn the money yet. If you sent money through a wire transfer, money transfer app, or gift card, contact that service immediately and report the transaction as fraud. Wire transfers and app transfers are rarely reversed, but reporting it quickly gives you the best chance.
Report the scam to the Federal Trade Commission at reportfraud.ftc.gov. This does not recover your money, but it creates a record that helps law enforcement track scam patterns. If you received a phishing email, forward it to phishing@paypal.com so PayPal can take down the fake page. If you received a text, take a screenshot and report it to PayPal through the app's Help Center.
How to prevent PayPal refund scams in the first place
Never click links in unsolicited messages about refunds, payments, or account problems. Instead, log into your PayPal account directly through the official website or app and check your account history. If there is a real issue, it will show up there. PayPal's official app is the safest way to access your account because it is harder for scammers to create a fake app that works the same way.
Turn on two-factor authentication in your PayPal account settings. This means that even if a scammer gets your password, they cannot log in without a code that PayPal sends to your phone. This is one of the most effective defenses against account takeover. You should also set up login alerts so PayPal notifies you whenever someone logs in from a new device or location.
Be skeptical of refunds you did not expect. If you get a message about a refund for something you do not remember buying, or a refund that is larger than you expected, do not act on it immediately. Log into your account and check your transaction history. Real refunds show up there. If you cannot find the transaction, it is almost certainly a scam.
What PayPal's actual refund process looks like
When you receive a real PayPal refund, it appears in your account automatically with no action required on your part. The refund shows up in your transaction history with the date and amount. If you paid with a linked bank account or credit card, the money goes back to that same account. The timeline varies: refunds from PayPal sellers usually take three to five business days, while refunds from credit card payments may take longer depending on your card issuer.
If you are waiting for a refund and want to check its status, log into PayPal and go to your Resolution Center. This is where all your disputes and refund requests appear. You can see the status of any refund you requested, and PayPal will show you the expected date it will arrive. PayPal will never ask you to confirm a refund by clicking a link or entering information. If someone contacts you claiming to be from PayPal and asking you to do anything related to a refund, it is a scam.
Frequently Asked Questions
Can PayPal refund money I sent to a scammer?
It depends on how you sent the money. If you sent it through PayPal's payment system to another PayPal user, PayPal may reverse it if reported quickly. If you sent it via wire transfer, gift card, or money transfer app, it almost certainly cannot be reversed. Report it to the service immediately and to the FTC, but do not expect to recover the money.
What should I do if I gave a scammer my PayPal password?
Change your password immediately by logging into PayPal directly. Then check your account activity and linked payment methods for anything you do not recognize. Remove any unfamiliar payment methods. Turn on two-factor authentication and set up login alerts. Monitor your account for the next few weeks for unauthorized transactions.
Is it safe to click links in PayPal emails?
No. Real PayPal emails never ask you to click a link to take action on your account. If you receive an email about a refund, payment, or account issue, log into PayPal directly through your browser or app instead of clicking any link. This protects you from phishing pages that look real but are controlled by scammers.
How do I know if a refund notification is real?
Log into your PayPal account directly and check your transaction history and Resolution Center. Real refunds appear there automatically. If you cannot find any record of a refund in your account, the notification is fake. PayPal never sends refund notifications that require you to do anything—the refund processes on its own.
What if I see a charge on my PayPal account I did not make?
Report it to PayPal through your Resolution Center as an unauthorized transaction. Do this within 60 days of the charge. PayPal will investigate and may reverse the charge. Change your password and turn on two-factor authentication to prevent future unauthorized access to your account.