untrappable.Check

PayPal text scam: is that payment alert real?

Yes — this is a scam. The illustrated PayPal message uses an unverified cancellation link and a payment scare. Open PayPal independently to check it.

Exhibit · Text message

Text Message · Today 9:52 AM
from +1 (786) 555-0129
PayPal: A payment of $312.48 to Digital Depot LLC is pending on your account. If you did not make this purchase, cancel it now: paypal-alerts[.]info/cancel

Other versions you might get: “Your account has been limited,” a code you never requested, or a fake refund text after a real purchase. The email version — the fake Norton invoice — is the PayPal email scam.

What to do right now

  1. Don't tap the link. Don't reply — even “STOP” confirms your number is live.
  2. Check independently. Open PayPal and review activity, invoices, and requests. Ask official support about anything unclear; a message is not proof that a payment exists or is absent.
  3. If you entered your PayPal login: change your password at paypal.com immediately, turn on two-factor, and review linked cards and recent activity. If you entered card details, call your bank.
  4. Report it. Forward the text to 7726 (SPAM) and the phish to phishing@paypal.com, then file at reportfraud.ftc.gov.
  5. Delete the message.

Reduce the risk of another scam

Do not use the message’s link to check the claim. Open the real service yourself. If you paid or shared account details, start with what to do after a scam. Blocking and reporting can reduce unwanted contact, but they cannot stop every attempt or tell you how the sender found you.

● Public service · free steps first

Take the free protection steps first

A suspicious message does not tell us how someone found your details. If you shared personal information, start with the official recovery guidance. You can also freeze your credit for free.

Decide what protection you need

Start with the free controls above. Compare what a paid service would add only after deciding which problem remains.

Frequently asked

Does PayPal send text messages about pending payments?
PayPal sends legitimate texts, and scammers copy its name and payment language. A link alone does not settle authenticity. Open PayPal independently and check the specific payment or account request before acting.
I tapped the link and logged in — what should I do now?
Change your PayPal password right away at paypal.com (typed yourself), enable two-factor authentication, and review your linked cards, bank accounts, and recent activity. If you entered card details on the page, call your bank to freeze or replace the card. Then forward the text to 7726 and the phish to phishing@paypal.com, and file at reportfraud.ftc.gov.
Why did I get a PayPal text if I don't have a PayPal account?
A scam text can reach people without PayPal accounts, but it does not reveal where the sender got the number. Do not follow its link. Report and block it, and contact PayPal independently if you suspect your identity was used for an account.
How can I tell a real PayPal text from a fake one?
Do not rely on a rule that every genuine PayPal text must be a code you just requested. Open PayPal independently to check the claim, and never share a sign-in code or payment details with an unverified sender.

Sources

  1. 01How to recognize and report spam text messages— Federal Trade Commission
  2. 02Mobile Payment Apps: How To Avoid a Scam When You Use One— Federal Trade Commission

Pass it on

Help protect someone else

If this could have fooled you, it can fool someone you know — a parent, a friend, the family group chat. It's safe to forward, and stands on its own as a record for a bank or the police.