How to Use PayPal Safely in Australia

PayPal is one of the handiest ways to pay online. You buy something, and the seller never sees your card number. If the parcel never turns up, or it arrives nothing like the photos, PayPal can step in and get your money back. For anyone buying from a shop they’ve not dealt with before, that safety net is the whole point. This guide is about paying online. For tap-and-go in shops, see our guide to Apple Pay and Google Pay.

The catch is that scammers know PayPal is trusted, so they dress up their tricks in its colours. Fake invoices, emails that look just like the real thing, and sellers who ask to be paid the wrong way. None of it is hard to sidestep once you know what to look for.

This guide walks through how PayPal keeps you covered, the scams doing the rounds in Australia right now, and a few simple habits that keep your account yours. No jargon, and nothing you need to rush.

What PayPal buyer protection actually covers

This is the part worth understanding, because it’s the reason to use PayPal in the first place. If you pay for something and it doesn’t arrive, or it shows up and it’s clearly not what was described, PayPal Buyer Protection can reimburse you for eligible purchases. That covers a few everyday situations: the order never comes, you get a completely different item, you paid for two and one turned up, the thing is a fake, or it has a fault that wasn’t obvious when you bought it.

There are a few conditions. You need to have paid with PayPal in a single payment, kept your account in good standing, and bought a physical item that can be posted. If a purchase goes wrong, you open a case in PayPal’s Resolution Centre, explain what happened, and PayPal looks into it. You’ve got a set number of days from the payment date to raise it, so don’t sit on a problem. Chase it up while it’s fresh.

One thing it won’t cover is buying something in person and paying by bank transfer, or handing over cash. That’s true of any pickup deal off Facebook Marketplace too. PayPal protection only applies when you actually pay through PayPal the right way, which brings us to the single most important habit.

Goods and Services, not Friends and Family

When you send money in PayPal, it asks whether you’re paying for goods or services, or sending to friends and family. This choice matters more than any other. Friends and Family is meant for splitting a dinner bill or sending your grandson a birthday twenty. It’s free, and there’s no protection, because it assumes you know and trust the person.

Here’s the trick to watch for. A seller you don’t know asks you to pay by Friends and Family, often saying it saves them the fee, or that it’s quicker. The moment you do, your buyer protection is gone. If they vanish with your money, or send a box of nothing, PayPal can’t help, because as far as it’s concerned you sent a gift to a friend. A genuine seller won’t ask you to do this. If someone does, treat it as a warning sign and walk away.

So the rule is simple. Buying something from a person or a small trader? Always choose Goods and Services, even if it costs a small fee. That fee is what pays for the safety net.

The PayPal scams doing the rounds in Australia

Most PayPal scams aren’t about the payment system at all. They’re about tricking you into handing over your login, your card details, or a payment you never owed. Here are the ones turning up in Australian inboxes.

Fake invoices and payment requests

You get an invoice or a request for money through PayPal, for something you never bought. Often there’s an alarming note attached: your account has a problem, a payment has gone out, ring this number straight away to sort it. That phone number goes to the scammer, not PayPal. They’re hoping you’ll panic and read out your details, or pay to make the “problem” go away.

Don’t pay it, and don’t ring the number. Real charges show up when you log in to your own account. If nothing’s there, there’s nothing to worry about. PayPal’s own advice is blunt on this: never call a number or click a link in a suspicious invoice, and never send payment to a cryptocurrency wallet a stranger asks for.

Phishing emails and texts

These are emails or texts made to look exactly like PayPal, right down to the logo. They’ll say your account is limited, or a payment needs confirming, and there’s a button to click. The link leads to a copy of the PayPal login page. Type your details in, and you’ve handed them straight to a stranger. Scamwatch, Australia’s scam reporting service, lists fake PayPal messages among the scams it tracks, so they’re not rare.

The safe move never changes. Ignore the link. Open PayPal yourself, either by typing paypal.com.au into your browser or using the app on your phone, and see for yourself whether anything needs doing. The same logic works for the text message scams that copy couriers and banks.

Overpayment scams

This one catches people selling things. A buyer “accidentally” pays too much, then asks you to refund the difference. Sometimes the original payment was made with a stolen card. When the real cardholder reports it, PayPal reverses the lot, and you’re left out of pocket for the refund you sent plus the item you posted. If a buyer overpays and asks for money back, stop. Refund the whole payment through PayPal and let them pay again properly.

Fake “you’ve been paid” messages

If you’re selling, watch for an email claiming the buyer has paid and telling you to post the item now. The money isn’t really there. Always check your actual PayPal balance by logging in before you send anything. An email is not proof of payment.

Simple habits that keep your account safe

None of these take long, and together they close off nearly every way an account gets taken over.

• Turn on two-step verification, so signing in needs a code sent to your phone as well as your password. Even if someone learns your password, they’re stuck without your phone.
• Use a strong password that you don’t use anywhere else. If PayPal shares a password with your email and one gets out, both are exposed.
• Log in by typing paypal.com.au or opening the app. Never through a link in an email or text.
• Ignore any message that tries to rush you. Urgency is the scammer’s oldest tool. PayPal won’t mind if you take a minute to check.

It’s the same calm approach that works against any scam that tries to rush you. Slow down, check it yourself through a channel you trust, and the pressure loses its grip. If you shop online a fair bit, our guide to safe online shopping covers the same habits for the rest of your buying.

How to report a PayPal scam in Australia

If a message slips through, reporting it helps you and helps others. For a dodgy PayPal email or website, forward it to phishing@paypal.com, then delete it from your inbox. Inside your account, you can also report an unwarranted invoice or payment request directly.

For scams more generally, Scamwatch is the place to report them, run by the National Anti-Scam Centre. You can lodge a report at scamwatch.gov.au. If you think your identity or your accounts have been tampered with, IDCARE offers free support on 1800 595 160, and you can report cybercrime through ReportCyber on 1300 292 371. Scam texts can be forwarded free to 7726, which the major telcos support. If you’ve actually lost money, phone your bank straight away, and if you or someone else is in immediate danger, ring 000.

For more on staying safe online, browse our scam safety guides.