TL;DR: Which? flagged a fake PayPal email in September 2026 saying your account is restricted due to inactivity and will close in 90 days, with a link to “create a new account.” The page steals your login and card details. Check your account by opening the PayPal app or typing paypal.com yourself. Forward the email to phishing@paypal.com and report@phishing.gov.uk, then delete it.
The email
According to Which? (September 9, 2026), the message says your PayPal account is restricted because of inactivity and will close in 90 days. A link leads to a fake page to “create a new account.”
It’s a clever twist. Most PayPal scams claim suspicious activity. This one targets people who *haven’t* used PayPal in a while, who are less likely to remember what a real PayPal email looks like and more likely to think “oh, I’d better keep that.”
What the fake page wants
- your PayPal email and password;
- card and bank details for the “new account”;
- sometimes a one-time code to “verify.”
How to check
Open the PayPal app or type paypal.com and log in. If there’s a real problem, it will show in your account. If you don’t use PayPal any more, close it properly from inside your account rather than via an email.
How to report
PayPal’s reporting page says to forward suspicious emails to phishing@paypal.com, then delete them. In the UK, also forward to report@phishing.gov.uk (the NCSC).
If you entered details
- Change your PayPal password, and your email password if they were the same.
- Turn on two-step verification in PayPal.
- Check for unknown payments and linked cards.
- Call your bank or 159 if you entered card details.
Old dormant accounts are a security risk in general. Our old accounts guide helps you find and close them, and the PayPal text scam guide covers SMS versions. A free email exposure check shows if your email is in breach data.
Frequently Asked Questions
Will PayPal close my account for inactivity by email link?
Check by logging in through the app or paypal.com yourself. Don’t use links in the email.
How do I report a fake PayPal email?
Forward it to phishing@paypal.com and, in the UK, to report@phishing.gov.uk.
What does the fake "create a new account" page steal?
Your login, card and bank details, and sometimes a one-time code.
I don’t use PayPal any more. What should I do?
Log in directly and close the account from your settings, so it can’t be misused.