Smishing / text-message scam
Is the Paypal text a scam?
The "Paypal" text going around is a smishing (text-message phishing) scam. Banks and payment apps never text you a link to "verify," "reverse," or "release" a payment. Open the app yourself instead of tapping any link.
A wave of texts claiming to be from Paypal is circulating in 2026. They are smishing — phishing sent over SMS — built to make you panic and tap a link before you think. Here's exactly what the message looks like, how to spot it, and what to do if you already tapped.
What the Paypal scam text looks like
Wording and amounts change, but the structure is always the same: urgency + a link + a request for money or details.
Red flags in the Paypal text
- A "pending payment" you don't recognize, with a cancel link — the goal is to get you to log in on a fake page.
- An urgent deadline ("within 12 hours", "final notice", "avoid suspension") designed to make you act before thinking.
- A link to a site that is not the company's real domain — often a look-alike with extra words or a strange ending (.com-style typos, .xyz, .top).
- A request for payment, card details, or a login from a text you did not expect.
What to do if you got the Paypal text
- Don't tap the link. Opening it can load a fake Paypal login page or trigger a malicious download.
- Verify independently: open the official Paypal app or type the address yourself — never from the text.
- Report it: forward the text to 7726 (SPAM) in the US, then delete it.
- If you already tapped or entered details, change that password now and contact Paypal and your bank.
- Run anything you're unsure about through Scam Doctor for a clear Stop / Verify / Continue verdict.
Frequently asked questions
Is the Paypal text a scam?
If it arrived unexpectedly and contains a link asking you to pay, verify, or log in, treat it as a scam. Banks and payment apps never text you a link to "verify," "reverse," or "release" a payment. Open the app yourself instead of tapping any link.
What happens if I clicked the link in the Paypal text?
Don't enter any details. If you already did, change your Paypal password immediately, contact your bank if you shared card or banking info, and watch for further suspicious activity. You can paste the message into Scam Doctor to confirm what it was.
How do I report the Paypal scam text?
In the US, forward it to 7726 (which spells "SPAM") so your carrier can block the sender, then report it to the FTC at reportfraud.ftc.gov and delete the message.
How can I check if a Paypal text is real?
Don't trust the link. Open the official Paypal app or website directly, or paste the message into Scam Doctor for an instant verdict in seconds.