untrappable.Check

PayPal email scam: is that invoice or alert real?

Yes — this is a scam. PayPal never sends invoices from “paypa1-billing[.]com.”

Exhibit · Email

Invoice #INV‑4471 — payment of $649.99 confirmed
P
PayPal Service
service@paypa1-billing[.]com
9:14 AM
We've charged your account $649.99 for a Norton 360 subscription renewal. If you did not authorize this, cancel within 24 hours to avoid the charge: paypa1-secure[.]com/cancel
Cancel this payment

Other versions you might get: A fake “you sent a payment” receipt, a money-request from a stranger, or an invoice for crypto or gift cards. The goal is always to get you to call a number or click a link in a panic.

What to do right now

  1. Don't click the link or button, and don't call any number in it.
  2. Check your real account. Open PayPal yourself and review invoices, requests, and transactions. Fraudulent invoices can be sent through PayPal’s real service. Do not pay an unrecognized request; report it using PayPal’s tools.
  3. Report it. Forward the email to phishing@paypal.com, then file at reportfraud.ftc.gov.
  4. Delete it, and mark it as phishing so future ones get filtered.

Reduce the risk of another scam

Do not use the message’s link to check the claim. Open the real service yourself. If you paid or shared account details, start with what to do after a scam. Blocking and reporting can reduce unwanted contact, but they cannot stop every attempt or tell you how the sender found you.

● Public service · free steps first

Take the free protection steps first

A suspicious message does not tell us how someone found your details. If you shared personal information, start with the official recovery guidance. You can also freeze your credit for free.

Decide what protection you need

Start with the free controls above. Compare what a paid service would add only after deciding which problem remains.

Frequently asked

Does PayPal send invoices or charge alerts from paypa1-billing[.]com?
The illustrated sender is a look-alike, but a genuine PayPal-generated invoice can also be fraudulent. Open PayPal yourself, check the invoice or transaction, and report anything you do not recognize. A familiar sender address is not proof that the request is owed.
There's a $649.99 charge in the email — is it real?
An invoice is not proof that you were charged. Open PayPal and check actual transactions, along with your linked card or bank statement. A scammer can send an invoice through PayPal itself, so its presence in your account does not mean you should pay it. Report an unrecognized invoice and contact official support about any unauthorized transaction.
I clicked the link and entered my PayPal login — what now?
Change your PayPal password immediately at paypal.com, turn on two-factor authentication, and review your linked cards and recent activity. Call your bank if you entered card details. Then forward the original email to phishing@paypal.com and report it at reportfraud.ftc.gov.
How can I tell a real PayPal email from a fake one?
Check more than the display name or greeting. Scammers can imitate PayPal, and fraudulent invoices can come through the real service. Open PayPal independently to review the invoice and payment history. Do not call an invoice’s supplied support number or pay an unrecognized request.

Sources

  1. 01How to recognize and avoid phishing scams— Federal Trade Commission
  2. 02Report fraud to the FTC— Federal Trade Commission
  3. 03Internet Crime Complaint Center (IC3)— FBI
  4. 04Official security and fraud guidance— paypal.com
  5. 05How To Recognize and Avoid Phishing Scams— consumer.ftc.gov

Pass it on

Help protect someone else

If this could have fooled you, it can fool someone you know — a parent, a friend, the family group chat. It's safe to forward, and stands on its own as a record for a bank or the police.