The PayPal invoice scam is particularly effective because it uses real PayPal infrastructure. Scammers send actual PayPal invoices — often for hundreds of dollars for 'Bitcoin purchases' or 'Norton antivirus' — hoping you will call the phone number listed in the invoice note and get scammed over the phone.
An invoice you did not request through PayPal is almost certainly a scam. Do not call any phone number in the invoice note. Log into your PayPal account directly to see if you actually owe anything — if no corresponding charge appears, it is fraudulent.
Real PayPal invoice (sent through actual PayPal system) from 'McAfee Antivirus Renewal': You owe $349.99 for auto-renewed McAfee Total Protection. To cancel or dispute, call 1-855-555-0188 within 24 hours.
PayPal's invoicing system is real and legitimate, but anyone can send invoices through it. The scam is the phone number — calling connects you to scammers who 'help' you cancel by extracting bank info or remote access.
Do not call any number printed in a PayPal invoice. If you don't recognize the invoice, you can simply ignore it — unpaid invoices don't charge you anything. Mark it as fraudulent in PayPal: open the invoice in PayPal, click the three dots, choose Report Phishing. If you already called and gave information, change PayPal password from paypal.com directly, enable two-factor authentication, review Authorized Logins and Pre-approved Payments, and contact your bank if you gave card or bank details.
Real PayPal invoices appear as a charge-on-receipt — you owe nothing unless you actively pay. PayPal never includes phone numbers for dispute in the invoice itself; disputes go through the Resolution Center inside your account. To verify any service charge, log into the actual service (McAfee account, Norton account) directly and check your subscriptions there.
Yes — PayPal's invoicing system is legitimate, but anyone can send invoices through it. Receiving one doesn't mean you owe anything; it just means someone sent an invoice.
No. Unpaid invoices don't charge you anything. Simply ignore unrecognized invoices, or report them as fraud through PayPal.
Calling connects you to scammers who 'help' you cancel by walking you through 'verification' that extracts bank info, installs remote access software, or convinces you to wire money 'to dispute the charge.'
Change PayPal password from paypal.com directly, enable two-factor authentication, review Authorized Logins, and contact your bank if you gave card or bank details.
Open the invoice in PayPal, click three dots, choose Report Phishing. Forward suspicious emails to spoof@paypal.com. File FTC report at reportfraud.ftc.gov.
Last reviewed: 2026-06-24 by the ScamRadar editorial team. We update this page when scammer tactics change or when official agencies issue new guidance.
ScamRadar · Blog · Scam Database · Is It Legit? · About