A fake PayPal payment email tells a phone seller that money has arrived or is "on hold until you ship", but the only reliable proof of payment is the transaction shown after logging in to PayPal directly through the PayPal app or by typing paypal.com, never through a link in the email. Scammers copy PayPal's logos and wording and send these emails from look-alike addresses. Real PayPal holds do exist for some sellers, but a real held payment appears in the PayPal account itself. A seller who ships based on an email can lose the phone with no payment. How to Sell an iPhone Online Safely and Avoid Scams covers other risks.
- Rule 1: check payments only by logging in to PayPal directly.
- Rule 2: no payment in the account means no payment, whatever the email says.
- Rule 3: never pay a fee or send a refund to "release" funds.
- Rule 4: ship only to the address on the PayPal transaction, with tracking.
How do I spot a fake PayPal email?
Spot a fake PayPal email with 8 checks. The table lists each sign.
| Check | Fake email sign |
|---|---|
| Sender address | A free email account or a misspelled domain instead of an address ending in @paypal.com |
| Greeting | "Dear customer" or "Dear seller" instead of your full name |
| Payment status | "Pending until you ship" or "on hold until tracking is provided" |
| Requests | A fee, an upgrade, a refund of extra money or your password |
| Links | Links that lead to a site other than paypal.com when hovered over |
| Urgency | Deadlines such as "within 24 hours" or threats to close the account |
| Language | Spelling mistakes, odd grammar or mismatched fonts |
| Account check | No matching transaction when you log in directly |
The last check settles every case. An email that looks perfect is still fake when the account shows no payment.
Why should I log in directly?
Log in directly because links in a fake email lead to look-alike sites that collect the PayPal password and banking details. Logging in directly works in 3 ways:
- Open the PayPal app already installed on the phone.
- Type paypal.com into the browser address bar.
- Use a bookmark saved before the sale.
Then check the Activity list for the payment, the amount and the sender. PayPal itself advises users to log in directly when they are unsure about an email.
How do real PayPal holds differ from fake ones?
Real PayPal holds and fake holds differ on 4 points. The table compares them.
| Attribute | Real PayPal hold | Fake email "hold" |
|---|---|---|
| Where it appears | Inside the PayPal account Activity, marked as on hold or pending | Only in an email |
| Who it applies to | Some new sellers or unusual transactions, under PayPal's policies | Anyone the scammer contacts |
| What releases it | Confirmed delivery or a set number of days, per PayPal's rules | A fee, a refund or a tracking number sent to the "buyer" |
| Payment to PayPal or the buyer | Never required | Always requested |
A seller who sees a real hold in the account can ship to the address on the transaction with tracking, under PayPal's seller protection terms. A seller who sees nothing in the account has not been paid.
What is a chargeback risk?
A chargeback risk is the chance that a buyer who paid takes the money back after receiving the phone. It happens in 3 ways:
- PayPal dispute: the buyer claims the item was not received or not as described.
- Card chargeback: the buyer asks the card issuer to reverse a PayPal payment funded by a credit card.
- Unauthorized payment claim: the payment came from a hacked account, and the real owner reports it.
PayPal's Seller Protection can cover eligible sales when the seller ships to the address on the transaction and keeps proof of delivery with tracking. Phones shipped to a different address, handed over in person without proof, or sold through Friends and Family payments fall outside that protection. PayPal's User Agreement lists the exact rules.
Why do scammers ask for Friends and Family payments?
Some scams ask the seller to accept a Friends and Family payment, or ask the seller to send one, because those transfers are meant for personal payments and do not carry PayPal Purchase Protection or Seller Protection for goods. A buyer who insists on that option for a phone purchase, or asks the seller to pay them, is a warning sign. Use Goods and Services for sales, and ship only to the transaction address.
What does the overpayment scam look like?
The overpayment scam shows a fake email claiming the buyer sent more than the price, such as $900 for a $700 phone, and asks the seller to refund the $200 difference. No payment was ever sent, or a real payment from a stolen account is reversed later. The seller loses the refund, and sometimes the phone too. Never send money back for an overpayment; log in directly and check the actual balance.
What is the seller's checklist before shipping a phone sold for PayPal?
Use this 7-point checklist before shipping a phone sold through PayPal:
- Log in directly and confirm the payment appears in Activity.
- Confirm it is a Goods and Services payment for the agreed amount.
- Copy the shipping address from the transaction, not from a message.
- Confirm the address is in the U.S. and not a package forwarding service.
- Photograph the phone, the IMEI screen and the sealed box.
- Ship with tracking and, for higher-value phones, signature confirmation.
- Upload the tracking number to the PayPal transaction.
Selling to a buyback removes these steps, because the buyback pays after testing and the seller never ships on the strength of an email.
What should I do if I clicked a fake link?
If a fake link was clicked and details were entered, take 4 steps right away: change the PayPal password by logging in directly, turn on two-step verification, check Activity for unknown payments and contact PayPal through the app or website. Forward the fake email to PayPal's phishing reporting address listed on its security page, and report it to the FTC at ReportFraud.ftc.gov.
How do buybacks pay by PayPal safely?
A mail-in buyback pays by PayPal after the phone arrives and passes testing, 1–2 business days after inspection. The seller receives a real PayPal payment that appears in the account, with no request to ship before payment, pay a fee or refund money. The phone travels with a free prepaid tracked label. How You Get Paid When You Sell Your iPhone: PayPal, Zelle or Bank compares methods.
Are text messages about PayPal also scams?
Text messages that claim to come from PayPal and ask the seller to click a link, call a number or share a code are a common scam. PayPal does send some texts, such as one-time security codes, but never asks for a code to be shared. Treat any message that asks for a code, a password or a payment as a scam. The Verification Code Scam When Selling Online explains code scams.
How do Zelle scams compare?
Zelle scams use the same trick, a fake email about a pending payment, but Zelle payments move directly between bank accounts and cannot be held for fees. The rule is the same: check the bank app directly. Zelle Scams When Selling an iPhone: How to Avoid Them covers Zelle in detail.
Which buyer behaviors signal a PayPal scam?
Several buyer behaviors signal a PayPal scam before any email arrives. The table lists them.
| Behavior | Why it is a warning sign |
|---|---|
| Agrees to the full price without questions | Real buyers usually ask about condition and battery |
| Cannot meet and wants shipping | Avoids an in-person check of payment |
| Asks for your PayPal email right away | Needed to send the fake notice |
| Wants shipping to a relative overseas or a forwarder | Falls outside Seller Protection |
| Offers extra money for fast shipping | Pressure to skip checks |
| Moves the chat off the marketplace | Removes the platform's records and protection |
How do I verify a sender address safely?
Verify a sender address by viewing the full address, not only the display name, which scammers can set to "PayPal". On a phone, tap the sender name to reveal the address. A legitimate PayPal email comes from a paypal.com address, but spoofing is possible, so the address check is a first filter, not proof. Logging in directly remains the final check.
What should a seller never do?
A seller should never do 5 things during a PayPal sale: click a link to confirm a payment, share a password or one-time code, pay any fee to receive money, refund an "overpayment" before checking the balance and ship to an address that differs from the one on the transaction. Following these rules prevents nearly every PayPal scam aimed at sellers.
Does selling on eBay change the risk?
Selling on eBay changes the payment flow, because eBay manages payments itself and pays sellers through its own system. Messages that claim an eBay payment is waiting outside eBay are scams. Check the eBay Seller Hub for real orders. Selling an iPhone on eBay vs a Buyback Service compares the 2 routes.
How long do PayPal disputes stay open?
A buyer can usually open a PayPal dispute within 180 days of payment under PayPal's Purchase Protection terms, and card chargebacks follow the card network's own time limits. Keep tracking records, delivery confirmation, photos and messages for at least that long after a private sale. PayPal's User Agreement is the authoritative source for current time limits.
Is it safer to sell to a business than a private buyer?
Selling to an established business is usually safer for payment, because the business pays after receiving and testing the phone, uses its own payment process and has no reason to send fake notices. Private sales can return more money in some cases, but they carry payment, dispute and safety risks.
Can PayPal confirm whether an email is real?
PayPal's customer service, reached through the app or by typing paypal.com, can confirm whether a message came from PayPal. Never use a phone number printed in a suspicious email.
Where can I sell a phone without a private buyer?
A mail-in buyback pays by PayPal after testing, with no private buyer involved. Sell iPhone for Cash starts a free quote.
Frequently asked questions about fake PayPal emails
How can I tell if a PayPal payment email is fake?
Log in to PayPal directly through the app or by typing paypal.com, never through the email's link, and look for the payment in Activity. A fake email often comes from a non-PayPal address, uses a generic greeting, claims funds are held until you ship and asks for a fee or refund.
Does PayPal hold payments until the seller ships?
PayPal can place real holds on some payments, mainly for new sellers or unusual transactions, but a real hold appears inside the PayPal account, not only in an email. PayPal never asks the seller to pay a fee or refund money to release a hold. No transaction in the account means no payment.
What is the PayPal overpayment scam?
The overpayment scam sends a fake email saying the buyer paid more than the price and asks the seller to refund the difference. No real payment exists, or a payment from a stolen account is reversed later, so the seller loses the refund and sometimes the phone. Never refund an overpayment without checking the account.
Can a buyer get a refund after I ship the phone?
A buyer can open a PayPal dispute or a card chargeback after the phone ships. PayPal Seller Protection can cover eligible sales when the seller ships to the transaction address with tracking and proof of delivery. Friends and Family payments and phones handed over without proof fall outside that protection.
What should I do with a fake PayPal email?
Do not click its links or reply. Forward it to PayPal's phishing reporting address listed on PayPal's security page, report it to the FTC at ReportFraud.ftc.gov and delete it. If you entered details on a linked site, change your PayPal password by logging in directly and turn on two-step verification.
Sources and references
- PayPal: security center, phishing guidance and Seller Protection terms in the PayPal User Agreement.
- Federal Trade Commission (FTC): ReportFraud.ftc.gov and consumer alerts on fake payment emails.
- Consumer Financial Protection Bureau (CFPB): guidance on payment app scams.
