04-05-2025
PayPal users given urgent warning to abide by 10 rules
PayPal users were being targeted by cyber criminals who were trying to trick them into handing over personal details.
Scammers were making the majority of threats via emails, which suggest worrying changes have taken place, such as accounts being suspended.
The emails urge PayPal users to update their details, but the links embedded within the message were fake and hand account data to crooks.
There has been a 600 per cent increase in PayPal attacks since the start of the year, according to the security team at McAfee Labs.
READ MORE: State pensioners with two-digit code to get £230 from DWP on Tuesday
Popular attacks include fake PayPal gift card offers, fraudulent invoices and customer support scams about billing issues, reports the Mirror.
McAfee said: "While PayPal works diligently to protect its users, scammers are constantly evolving their tactics and often capitalise on well-known companies, especially if they've been in the news recently.
"The recent surge has been traced to a single, highly effective campaign where attackers send official-looking emails with 'action required' warnings, demanding users update their account details within 48 hours or face account suspension."
PayPal also has dedicated a full webpage to online scams in a bid to help prevents users from falling victim.
Below you'll find McAfee's 10 top tips for those with a PayPal account.
• Verify all communications directly with PayPal
People should never click links in emails or texts claiming to be from PayPal.
Instead, open a new browser window and log in directly at Pay, Send and Save Money with PayPal, or use the official PayPal app to check for notifications.
• If an email says it's from services@ be cautious
Some scammers spoof email addresses or use real PayPal tools like their invoices to fool you.
• Scrutinise web addresses and email senders
If a PayPal email is legitimate, it will come from addresses ending in @
People should be wary of similar-looking domains like or
• Never call phone numbers provided in suspicious messages
When contacting PayPal support, people should only use the official contact methods listed on their website.
• Use PayPal's built-in security features
Familiarise yourself with PayPal's security centre and take advantage of their fraud protection tools.
• Check your PayPal account regularly
Frequent monitoring allows users to spot unauthorised activity quickly.
Anything suspicious should be reported before significant damage occurs.
• Be sceptical of urgency and threats
Legitimate companies do not typically threaten immediate account closure or demand urgent action within short timeframes like 28 hours.
• Turn on two-factor authentication
This way, even if someone gets your password, they still can't access your account without a code sent to your phone or an authenticator.
• Report suspicious activity immediately
A suspicious message or notice unauthorised activity, should be reported to PayPal and password changed right away.
• Skip messages that offer gift cards or say you'll get paid for filling out a survey
PayPal doesn't typically send these, but scammers often do.