Is this PayPal 'your account is limited, verify to restore' text a scam?
Last reviewed: 2026-08-01 · Checked with Hunch’s on-device engine, the same one inside the extension. How Hunch checks →
Part of our guide: How to recognize a bank-impersonation scam →
Yes. A 'PayPal account limited, verify your identity within 24 hours to restore access' text linking to paypal-secure.example is a phishing impersonation. PayPal resolves account limits inside the app or on paypal.com, never on a look-alike '-secure' domain with a deadline. The limitation scare, the clock, and the fake host are the tell; the login you'd enter to 'restore' access is exactly what they steal.
Got a message like this? Paste it here →
PayPal sits on top of people's real bank accounts and cards, so a 'your account is limited' warning triggers immediate worry about locked-up money. That fear is the lever: users rush to 'restore access' and land on a fake login. Freelancers, sellers, and anyone who depends on PayPal for income are especially exposed, since losing access to their payment lifeline feels urgent enough to skip checking the domain.
Illustrative example of the pattern, not a real message someone received.
How to verify it yourself
- Log in only through the PayPal app or by typing paypal.com yourself, never the texted link.
- PayPal's domain is paypal.com; paypal-secure.example is a look-alike, not PayPal.
- Genuine account limits show up in your PayPal Resolution Center, not on an outside 'verify' page.
- When unsure, contact PayPal support through the official app.
Common questions
is paypal-secure.example a real PayPal domain
No. PayPal uses paypal.com. A '-secure' host on .top is an impersonator's page built to capture the login and details you enter.
does PayPal text you to verify identity to restore access
PayPal handles limitations in the app's Resolution Center, not through an SMS link demanding identity verification on an outside domain under a deadline.
why is the PayPal text giving me 24 hours
The 24-hour suspension threat is pressure meant to rush you to the fake login before you check the domain. Real reviews don't expire overnight.
is a PayPal account limited text a scam
Yes, when it routes you to a look-alike link with a deadline. The 'limited/suspended' story is a script; the spoofed host proves the intent.
If you already responded
- Change your PayPal password immediately at paypal.com and turn on two-factor authentication.
- Review linked bank accounts, cards, and recent activity for anything unauthorized.
- Report the phishing at reportfraud.ftc.gov and to PayPal.
Source: FTC, How To Recognize and Avoid Phishing Scams
Hunch is not affiliated with PayPal. PayPal is named only to describe a scam that impersonates it; the real PayPal does not send these messages.