Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →If you think your PayPal account was hacked, treat it as potentially compromised while you check what happened. Go to PayPal directly—not through a message link—change your password, review account details and recent activity, and report payments you did not authorize. Then secure the email, bank, and card accounts connected to PayPal.
Signs your PayPal account may be compromised
An unfamiliar email or charge does not prove someone accessed your account. Look for several kinds of evidence, especially changes or activity you did not make:
- Your password, email address, phone number, security settings, or shipping address changed without your permission.
- You received a login alert for a device or location you do not recognize.
- You see a payment, transfer, refund, or withdrawal you did not initiate.
- A new bank account, card, merchant authorization, or automatic payment appears.
- Messages appear to have been sent from your account, or you cannot sign in with your correct credentials.
- There are unusual attempts to add or use a card.
The FTC lists unexpected password or contact-detail changes, unfamiliar login alerts, and trouble signing in among common signs of account takeover. FTC guidance on hacked accounts can help you assess other warning signs.
What to do immediately
1. Open PayPal safely
Type paypal.com into your browser or open the official PayPal app. Do not use a link or phone number in a message claiming to confirm a payment, cancel a transaction, or reset your password. PayPal warns that password-reset messages can be phishing attempts and recommends going to its site directly. PayPal account-protection guidance
Recommended Free Tools
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Do not share your password, one-time code, or authentication code with anyone. PayPal says it will not ask you for a password or authentication code by phone, email, or text.
2. Change your PayPal password and security questions
If you can sign in, change your password to one you do not use anywhere else. PayPal recommends a longer password—its security page suggests at least 12 characters—and changing it promptly after suspected unauthorized activity. Change your security questions as well. If you reused the old password, replace it on every other account where you used it, beginning with your email account.
PayPal’s instructions for users who suspect fraud or account compromise also call for changing the password and security questions. PayPal guidance for suspected fraud and unauthorized activity
3. Check account details and turn on two-step verification
Review your email addresses, phone numbers, mailing and shipping addresses, linked bank accounts and cards, saved merchants, and automatic payments. Remove or correct anything you do not recognize. Then, in PayPal on a web browser, go to Settings → Security → Set Up under 2-step verification. Choose an available method, such as an authenticator app or SMS, and complete enrollment. PayPal’s interface and available methods can vary by account, device, and country.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Two-step verification adds a code in addition to your password; it does not make an account immune to phishing, malware, SIM swaps, or a compromised email account. Never tell another person the code you receive.
4. Secure the email account tied to PayPal
Your email inbox can be used to reset PayPal access, so change its password through the email provider’s official site and enable two-factor authentication. Review recent sign-ins and active sessions, recovery email addresses and phone numbers, forwarding rules or filters, and sent and deleted mail. Sign out of sessions you do not recognize. If the email password was reused elsewhere, change those passwords too. The FTC’s account-recovery guidance explains these checks.
5. Check your device if you installed or opened something
If you downloaded software, installed a browser extension, or suspect malware after clicking a link, update your security software and scan the device. Remove suspicious software and change passwords from a device you trust. The FTC recommends scanning a device when recovering a hacked account. FTC recovery guidance
Check whether an unfamiliar payment is really unauthorized
Before reporting a charge, check its status and details in PayPal, and consider whether it could be:
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
- A purchase by a spouse, child, household member, employee, or another authorized user.
- A subscription or automatic payment, possibly shown under a billing name you do not recognize.
- A pending authorization rather than a completed payment.
- A refund, reversal, currency conversion, temporary card verification, or a purchase made through an app or marketplace.
PayPal specifically advises checking household activity and automatic payments before filing an unauthorized-activity report. PayPal’s reporting instructions
For an unfamiliar subscription, look under Settings → Payments for Subscriptions and saved businesses or Automatic Payments; labels can differ. Review the merchant and cancel the automatic payment if appropriate. Canceling may stop future billing, but it does not necessarily reverse a completed charge. Contact the merchant or choose the PayPal reporting route that matches the problem.
A pending authorization, completed PayPal payment, bank transfer, PayPal Credit transaction, and card payment processed outside PayPal can have different cancellation or dispute options. Do not assume PayPal can cancel every payment.
Report a payment you did not authorize
- Open PayPal’s Resolution Center.
- Select Report a problem.
- Choose the suspicious payment and select Continue.
- Choose I want to report unauthorized activity and follow the prompts.
- Save the case confirmation and any correspondence.
This is PayPal’s reported U.S. website path; account type or interface changes may affect the labels. PayPal says it sends an email within 10 days after an unauthorized-transaction report. That is an update window, not a guarantee of a final decision or refund by that date. PayPal investigates reported activity, and the result depends on the circumstances and applicable terms.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Keep a record of the transaction date and amount, merchant or recipient, transaction ID, screenshots, messages received, account changes, the date you contacted PayPal, and the case number. Preserve messages and other evidence rather than deleting them.
Protect linked bank accounts, cards, and your phone number
Contact the bank or card issuer immediately if the linked account shows an unauthorized withdrawal or charge, the attacker may have obtained full account or card details, or you see repeated attempts to add or use a card. Use the number on the card or statement, or the institution’s official app—not a number in an unsolicited message. PayPal also advises contacting the card issuer when unusual activity suggests a card may be compromised. PayPal guidance on unusual card activity
A PayPal dispute does not replace reporting fraud on the bank or card account itself. PayPal has different reporting routes for personal or business accounts, PayPal Credit, the PayPal Debit Card, and PayPal-branded credit products. PayPal fraud-reporting options
If text-message verification suddenly stops working or your number appears to have changed, contact your mobile carrier through its official support channel to check for a SIM swap or account takeover. Regain control of the number and update PayPal’s contact details.
Best Value
- The information below is per-pack only
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
If you cannot sign in or the attacker changed your details
Use PayPal’s official account-recovery or Contact Us route, reached from PayPal’s own website. Do not call a customer-service number from search results, social media, or a message; fake support numbers can lead to scams. Never give a supposed representative your password or one-time code, install remote-access software at their request, or send money to “secure” or “unlock” an account.
PayPal may ask for identity verification by text, phone call, account information, security questions, card details, email, or a push notification. PayPal says repeated unsuccessful security checks may mean you need to wait 24 hours before trying again or contact it directly. PayPal security-check guidance
If your mobile number changed and codes go to an old number, PayPal provides a separate recovery path for that situation. PayPal guidance for a changed phone number
When to consider identity-theft steps
A PayPal password compromise alone does not automatically call for a credit freeze. A freeze restricts access to your credit report to help prevent new credit accounts; it does not secure a PayPal login or reverse a payment. Consider broader identity-theft steps if Social Security, identity-document, bank, or card information may have been exposed.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitches- If personal identity information may be misused: Report it at IdentityTheft.gov for an FTC recovery plan.
- If you want businesses to take extra steps before opening new credit: A free initial fraud alert lasts one year and can be placed with one of the three nationwide credit bureaus; that bureau must notify the other two.
- If you want to restrict access to your credit reports: A credit freeze is free and must be placed separately with Equifax, Experian, and TransUnion. It remains until you lift or remove it.
- If you are a confirmed identity-theft victim: An extended fraud alert may be available for seven years with an FTC Identity Theft Report.
The FTC explains the differences between fraud alerts and credit freezes and gives details on credit-freeze requirements.
Quick Recap
Choose the response that matches what happened
| What you found | What to do |
|---|---|
| Suspicious PayPal email or text, with no unusual activity in the account | Check PayPal by opening it directly, do not click the message’s links, and report the suspicious message through PayPal’s official tools. |
| You entered your PayPal password on a fake website | Change the PayPal password and any reused passwords, enable two-step verification, and review recovery details and recent activity. |
| Unauthorized PayPal payment, but you can still sign in | Secure the account, file an unauthorized-activity report in the Resolution Center, and contact the bank or card issuer if its account also shows suspicious activity. |
| Linked bank or card also has an unauthorized transaction | Report it to the bank or card issuer using its official channel, as well as reporting any unauthorized PayPal activity. |
| Email account may be compromised | Secure the email account and its recovery settings promptly, and inspect forwarding rules and active sessions. |
| Social Security number or identity documents may be exposed | Use IdentityTheft.gov and consider a fraud alert or credit freeze based on the exposure. |
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
