An email warns that your PayPal account has been “limited” due to unusual activity, and you must confirm your information within 24 hours or lose access to your money. The logo looks right, the tone is official, and the fear of being locked out of your funds is real. But the link goes to a fake PayPal that steals your login and card. Our GetMyPassword team explains how to recognize a PayPal account limited scam.
How the scam works
You get an email or text styled as PayPal, claiming your account is limited, suspended, or frozen over “suspicious activity,” an “unauthorized login,” or “unverified information.” It pressures you to click a link and confirm your details within a deadline to restore access. The link leads to a fake PayPal login page that captures your email and password, then often asks you to “verify” your card, bank, and personal details too. With your login, scammers drain or misuse your account; with your card, they commit fraud. The account was never limited — the alarm exists only to rush you onto the fake page.
Red flags to watch for
- An urgent deadline — confirm now or lose access to your account.
- A link to “verify” or “restore” rather than opening the app yourself.
- A sender address or link domain that is not the real PayPal.
- Requests for your password, card, or bank details on a linked page.
- Generic greetings instead of your name, and slightly off wording.
How to verify your real account
Never use the link in the message. To check whether anything is wrong, open the official PayPal app or type the address yourself and review your account status and any genuine alerts there. Real PayPal notices appear inside your account, and genuine support never asks for your full password or card details by email link. If your account truly needed attention, you would see it when you log in directly. A message demanding you “confirm” sensitive details through a link, under a countdown, is phishing no matter how authentic it looks.
A real account problem is visible when you log in yourself; a fake one only exists in the email. The countdown is there to march you onto the fake page before you think to check directly.
How to protect yourself
Do not click links in “account limited” messages; open the official PayPal app and check your status there. Never confirm your password, card, or bank details through an emailed link, and ignore the deadline pressure. Turn on two-factor authentication and use a unique password from our password generator for PayPal and your email. If you entered details on a fake page, change your password immediately, review activity, and contact PayPal and your bank.
Frequently asked questions
Is a “PayPal account limited” email a scam?
An urgent email claiming your account is limited, with a link to “verify” your details under a deadline, is a common phishing scam. Real PayPal notices appear inside your account when you log in directly, and support never asks for your password or card by email link.
How do I check if my PayPal account is really limited?
Open the official PayPal app or type the address yourself and review your account status there, rather than clicking the link. Any genuine issue will be visible when you log in directly through official channels.
What if I already entered my details?
Change your PayPal and email passwords immediately, turn on two-factor authentication, and review recent activity. Contact PayPal and your bank to watch for fraud, and replace any card whose details you entered.