Yes, hackers can get into PayPal accounts, not usually by breaking PayPal's core security but by tricking users through phishing scams, malware, weak passwords, or exploiting breaches from other sites where users reuse credentials, even with PayPal's strong encryption and features like 2FA. Common attack vectors include fake emails directing users to fake login pages, malware on devices, or using stolen credentials from other data breaches to access linked email accounts, which can then be used to reset PayPal passwords.
Hackers often take over PayPal accounts through phishing. They use fake emails or websites to deceive users and steal login details. These fakes look increasingly convincing today.
Hacked PayPal Scams
When a scammer has successfully hacked into somebody else's PayPal account (often by using a phishing scam), they can make purchases and send payments with the money from the account they've taken over.
A good rule of thumb is to not send money to strangers, even if they give you a good reason to. Before transacting with anyone, do a thorough background check on them. If you're not completely certain they're not scamming you, then it's better stay on the safe side and not transact.
Every payment is encrypted to help keep your transactions secure. If something doesn't seem right with a payment request, you can report it to us. Your eligible purchases1 are protected when you send money via Goods and Services.
A hacker with sophisticated technology can access your bank account through PayPal. Although PayPal is generally considered a secure online payment platform, cybercriminals today are getting more creative and dedicated to infiltrating the financial accounts of unsuspecting victims.
Credit and debit cards may offer some protections that can help you recover your money for purchases you don't receive. If you pay with a credit card, your bank will likely reimburse you if you don't receive the goods. If you pay with a debit card, your bank will try to recover your money from the scammer's bank.
What is high risk for PayPal? PayPal considers a business high-risk if it's in an industry prone to chargebacks, fraud, or legal issues — like CBD, travel services, supplements, adult products, and more. High transaction volumes and frequent disputes can also trigger high-risk flags.
It's safe to use PayPal as long as the buyer uses the "Buy Now" button on the listing to make their payment. The only way a refund can be issued in this case is through Facebook Marketplace, which is one way to avoid PayPal scams.
Accept Transfers Through Verified Contact Information
One of the safest ways to receive a money transfer from someone you do not know well is by using a verified email address or phone number linked to your payment platform.
Scammers will actually go as far as to send you money then contact you to say it was a mistake and ask for a refund. The scam occurs when they ask you to issue a refund to a different account. The key to the scam is that the “accidental” money was sent to you via a stolen credit card.
You can spot a PayPal scammer by looking for generic greetings, a sense of urgency (e.g., "act now!"), poor grammar/spelling, suspicious links or attachments, requests for personal info, or unusual requests like paying with crypto or a fake invoice for an unordered item. Real PayPal communications use your name and come from an official @paypal.com address, and they never ask for passwords or full card numbers in emails.
Yes, it is possible and safe to receive money on PayPal without linking a bank account. Friends, family, members, or even strangers can pay via email on PayPal or via a personal payment link. The money received will stay in the PayPal account balance until you are ready to use it.
Your information is secured.
When you pay with PayPal, your financial information is never shared with the seller, and you can pay using only your email address and password.
Someone typically can't steal your identity with only your email address. However, hackers can use your email to access sensitive data through tactics like phishing scams. If they gather enough personal information, they could use it to steal your identity.
How to know if you've been hacked
PayPal can be safe to use with strangers if you mark payments as Goods and Services, which offers buyer protection. Avoid sending Friends and Family payments to people you don't know personally.
Yes, PayPal will often refund you if scammed through its Buyer Protection program, covering eligible purchases not received or significantly different from described, provided you file a dispute within 180 days and follow procedures like escalating to a claim if needed. Protection applies when you pay for goods/services, not usually 'Friends & Family' payments, so always use Goods & Services for purchases to get coverage.
With PayPal, you receive money when someone sends a payment to your email address or mobile number. Once that happens, we'll send you a message letting you know you have money available.
“The reality is, if you've had self-employment or side-gig income, that's had to go on your tax return since 1913.” In 2021, Congress lowered the threshold for reporting income on payment apps from $20,000 and 200 transactions annually to $600 for a single transaction.
Our Seller Protection helps guard against losing money to claims, chargebacks, and reversals. You're covered for the total purchase amount on all eligible transactions. Our Seller Protection applies to 2 types of complaints: Item not received issues filed through PayPal's Resolution Center.
No, PayPal cannot take money from your bank account without your permission; all withdrawals require authorization, but unauthorized charges can happen due to scams, account compromises, or forgotten subscriptions, so you should report any suspicious activity immediately via the Resolution Centre or customer service. Common reasons for unexpected debits include insufficient PayPal balance requiring bank backup, automatic bill payments, or linked accounts being used fraudulently.
Yes, a scammer can potentially access your bank account with just your phone number, primarily through a SIM swap scam, where they trick your mobile provider into transferring your number to their SIM, letting them intercept 2FA codes, or by using your number for phishing/social engineering to get more info and bypass bank security. While having only the number isn't usually enough for direct access due to bank security, it's a powerful tool for identity theft and account takeover, especially when combined with other stolen info.
Consider these seven ways to help you outsmart scammers:
What Online Payment System Is Best?