A PayPal invoice can be real inside PayPal and still be fraudulent. PayPal branding proves that a request exists—not that you ordered anything or owe the sender money.
If you do not recognize the purchase, do not pay, call a number in the invoice note or follow its links. Open PayPal yourself and inspect Activity. PayPal's current invoice-scam guidance gives the same core advice.
Use This Seven-Point Invoice Check
| Check | Expected evidence | Stop when |
|---|---|---|
| Order | Your order, contract or renewal | You never bought it |
| Seller | An identity you independently recognize | Only the display name matches |
| Amount | Agreed price, currency, tax and shipping | A surprise charge appears |
| Items | Specific products or services | The description is vague or alarmist |
| Contact | Details from a known site or contract | The note gives a new “support” number |
| Destination | Visible after opening PayPal directly | The message leads elsewhere |
| Timing | A date matching the real transaction | Urgency replaces facts |
This is a verification sequence, not a score. One failed identity or order check is enough to pause.
A Genuine PayPal Email Does Not Validate the Seller
An attacker may send a real invoice through PayPal and put a fake customer-service number in its notes. Checking only the sender domain is therefore insufficient. PayPal warns that invoice scams commonly use alarmist notes and unfamiliar phone numbers to move victims into a call.
Open a new browser tab or the official app, sign in without using the message link and find the invoice in Activity. Verify the purchase through a separate channel you already trust. Never use contact details supplied only by the suspicious invoice.
Report an Invoice You Do Not Recognize
Do not pay or send a “test” payment. In PayPal Activity, open the request and use the available decline or report control. PayPal's reporting instructions say unfamiliar invoices should not be paid and describe reporting from Activity.
Forward suspicious emails or sites to [email protected], then delete the message. If you shared credentials, change your password from the official PayPal site and review activity. If money moved, use PayPal's Resolution Center and contact your bank or card issuer as appropriate.
Add a Two-Record Check for Business Invoices
Require every invoice to match both an approved supplier record and an internal purchase record. For changed payment details, unusual currencies or a new sender address, have a second person verify the change through a known channel.
Record the invoice number, seller, internal owner, purchase reference, amount, currency and outcome. This creates an audit trail without treating a screenshot as evidence.
Make Your Own Invoice Easy to Verify
Use the free PayPal invoice generator to prepare a clearly labeled invoice draft with seller, buyer, line items, due date and payment instructions. It creates a professional document; it does not create a PayPal transaction or prove payment.
For invoices that should accept PayPal alongside cards or local methods, use PayRequest invoicing. Keep the invoice, payment status and customer record together so the buyer does not need to trust a detached screenshot.
