Spot Fake PayPal Notification Emails (Explained)

When you’re selling on an online marketplace like eBay or Amazon, you need to be aware of fake PayPal notification emails.

These fake PayPal payment confirmations falsely state that the buyer has paid for the item. The email is faked to look as if it comes from PayPal or the marketplace.

What Do Fake PayPal Notification Emails Look Like?

The sender will look official (e.g. payments@payal.com).  The email will probably contain authentic-looking logos.

Often the subject and body text will be very similar to the official text that a Seller is used to receiving.

The situation you want to avoid is shipping them the item and discovering too late that you haven’t been paid.

Fake Emails May Also Include Phishing Attempts

Simply sending unpaid items is possibly the “least worst” outcome of this scenario.

The fake email may go to some lengths to entice the Seller to click on embedded links or graphics in order to “re-submit” their PayPal or marketplace details.

This link will take the Seller to a webpage that looks like PayPal or whatever. Unfortunately, it may be a phishing page, designed to obtain your username and password for further malicious theft.

Telltale Signs Of Fake PayPal Confirmation

There are some other telltale characteristics to watch out for.

The buyer insists on PayPal when you offer bank transfers

If the Seller usually takes payment direct to their bank account, the Buyer will insist that PayPal is used.

Why? Because PayPal genuinely sends email notifications of payments. Your bank account does not, so you’re more likely to notice that something is wrong with an email faked from your bank.

There are reports of scammers sending emails purporting to come from their own bank saying that money has been transferred to your account.

This is less popular with scammers, as sellers may be more suspicious of, what is for them, an unusual message.

The buyer asks for your PayPal email or a money request

Many sellers report that the buyer explicitly asks for their PayPal email. Alternatively, the buyer makes a PayPal Money Request (which goes to their email).

This is a red flag. It is moving the transaction outside of the online marketplace trading and messaging system.

The scammer wants the PayPal email because Sellers are accustomed to receiving funding notifications to *that* email.

Why doesn’t the scammer simply send their fake email through the marketplace messaging system?

Some marketplaces simply won’t allow external links to be included in messages sent within their system. Some marketplaces won’t allow email addresses to be mentioned.

They will monitor for anything that looks like evidence that trading is taking place (or being encouraged to take place) outside their marketplace, and will move to ban both Buyer and Seller.

So the scammer needs the Seller’s PayPal email.

Cloaking the request for an email

The buyer may not baldly ask for your PayPal email. To avoid suspicion, they may camouflage their intent in a request for other information.

Often, more photographs or requested, or a separate invoice.

As many marketplaces won’t allow mention of email addresses in their messaging systems, the scammer has to be a bit creative here. For example, if the Seller helpfully sends an invoice “for their records”, it may include an email and phone number.

The Scammer will make contact using these details, and request the PayPal email to complete payment. Once they have the email, that false notification is sent.

How To Defend Against Fake PayPal Payment Confirmation

The best defense against this scam is for Sellers to check their PayPal accounts to verify that they have been paid.

Don’t click on links within emails to go to PayPal, remember the cautionary note about phishing.

Avoid “Payment on Hold” Fake Emails

To counteract sensible Sellers checking their PayPal account, scammers will use some additional sophistication.

Another fake email will arrive, purporting to be from the marketplace.

This one states that the marketplace (e.g. eBay) is holding the funds until the Seller emails the tracking number of the item to the Buyer. Of course, in order to provide the tracking number, the Seller has to go ahead and ship the item!

This is completely fake. eBay or Amazon never hold funds in this way.

This email takes several forms. Here is one example from 2016. This is a double-hander, the Seller got two emails.

You have funds of X pending to be credited to your account. When we receive the Tracking Number from the buyer via email, your account will be credited immediately.

Example of Fake PayPal Notification

The buyer followed up the email above with this one:

Please send me the Tracking Number, so I can send it to PayPal, thank you.

When Sellers Are At Fault

Sometimes, the Seller is not a faultless victim.

When contacted by the scammer, the seller may decide to keep the transaction outside the online marketplace to avoid fees. That is one reason to voluntarily give up one’s PayPal email!

You may have jumped into the fishing net by doing this!

Beware Of Buyers Who Avoid Cash On Delivery

Obviously, as the fake notification scam depends on payment via PayPal, the buyer has a problem if the seller uses Cash On Delivery.

If the seller’s preferred method is Cash on Delivery then the scammer must convince the seller to switch.

This usually involves some cock-and-bull story that puts the scammer all at sea (literally).

Here are a few examples reported by sellers:

  • I work offshore as an instructor on an oil rig.
  • I am an oceanographer.
  • I’m a Marine contractor at sea.

But not every scammer is a jaunty sailor.

This poor dude had other problems: “sadly I can’t come personally to collect due to my hearing loss and I’m just recovering from heart surgery so I’m home-bound.”

In his next email, the unfortunate fellow’s leg had fallen off (I’m making this part up!).