Fake Invoice Email Scams: How to Check Before You Pay
By Kevin Johnson · Author and editor
Received an unexpected PayPal or Apple invoice? Learn how to spot fake invoice scams, check suspicious charges, and protect yourself before paying.
Got an unexpected PayPal or Apple invoice? Don't click, call, or pay just yet. Here's how to check whether it's real.
Imagine opening your email and seeing a receipt for a $499 purchase you never made.
It looks like PayPal. Or maybe Apple. There's a familiar logo, an invoice number, and a phone number to call if you didn't authorize the purchase.
Your first thought might be, "Someone has my account!"
That's exactly the reaction scammers want.
Fake invoice scams are designed to make you panic before you've had time to check what's really happening.
What does a fake invoice scam look like?
These messages often claim that:
- You purchased an expensive product you don't recognize.
- Your subscription is about to renew automatically.
- Your PayPal or Apple account has been charged.
- You must call immediately to cancel a payment.
- You need to verify your information to receive a refund.
The email might even look professional, with company logos, order numbers, and familiar formatting.
But a professional-looking invoice doesn't mean you owe anyone money.
According to the Federal Trade Commission, scammers use messages about unexpected charges and supposed account problems to trick people into clicking links or sharing information.
Can a real PayPal invoice still be a scam?
Yes. And this is particularly important.
Scammers can use PayPal's legitimate invoicing system to send an invoice for something you never purchased.
The email notification may genuinely come from PayPal, but the payment request itself can still be fraudulent.
PayPal warns about invoice and money-request scams.
The warning sign isn't necessarily the sender's email address. It's the unexpected request and the pressure to call a phone number or send money.
If you receive an unfamiliar PayPal invoice:
- Don't pay it.
- Don't call the number printed in the invoice.
- Open the PayPal app or visit PayPal's website yourself.
- Check your account activity.
- Report the suspicious invoice through PayPal.
Remember: An invoice appearing in your PayPal account doesn't automatically mean money has been taken.
What about fake Apple receipts?
Apple impersonation scams work in much the same way.
An email might claim you've purchased an expensive app, renewed an unfamiliar subscription, or been charged for something you didn't order.
Rather than using the email's links or phone numbers, check your purchase history directly through Apple.
You can visit Apple's official purchase history service or use the App Store on your device.
Apple also provides guidance on recognizing suspicious messages.
If you don't recognize a charge, check whether it belongs to another family member or a different Apple account before concluding it's fraudulent.
Five warning signs to look for
1. A charge you don't recognize
An unexpected invoice deserves verification, even when it looks authentic.
2. Pressure to act immediately
Scammers don't want you to stop and think. They may tell you that your account will be locked or that you have only a few hours to respond.
3. An unfamiliar support number
Be especially cautious when a message tells you to call a particular phone number to cancel a charge.
4. Requests for passwords or payment details
Don't provide sensitive information through an unexpected email or a link it contains.
5. Instructions to send money somewhere unusual
Gift cards, cryptocurrency payments, and unexpected transfers can be serious warning signs.
No single clue proves an email is fraudulent. Look at the overall situation and verify the claim independently.
What should you do if you've already paid?
The next step depends on what happened.
If you paid by credit or debit card:
Contact your card issuer using the number on your card. Explain the situation and ask about disputing the payment.
If you transferred money:
Contact your bank immediately and ask whether the transfer can be stopped or recalled.
If you paid using a gift card:
Contact the gift card issuer as soon as possible. Keep the card and receipt.
If you shared a password:
Change it using the real company's website or app. Enable two-factor authentication where available.
You can also report suspected fraud at ReportFraud.ftc.gov.
The sooner you act, the better your chance of limiting further harm. Recovery is not guaranteed.
Helping a parent recognize fake invoice emails
Sometimes the hardest part isn't identifying a suspicious invoice. It's helping someone you love feel comfortable asking questions.
An older parent might worry they're bothering you. They might feel embarrassed that they couldn't tell whether the email was real.
A simple family rule can help:
If an unexpected message asks for money, stop and check before paying.
Encourage your parent to take a screenshot and ask for a second opinion.
LookSteady is designed to help with that process.
Upload a screenshot or photo of a suspicious email, and LookSteady provides a plain-English assessment of possible warning signs and practical next steps.
Family subscribers can also request a second opinion from a trusted contact.
LookSteady is a helpful checking tool, not a guarantee that a message is safe or fraudulent.
The bottom line
An unexpected invoice doesn't automatically mean your account has been charged.
And an email that looks legitimate isn't necessarily trustworthy.
Don't use the suspicious email to investigate the suspicious email.
Open the company's official app or website yourself, check your account, and ask someone you trust when you're unsure.
Have a suspicious invoice?
Take a screenshot and let LookSteady help you understand what to watch for.
Try LookSteady — 3 free checks
From the Founder: Why This Matters to Families
Fake invoice scams aren't just about suspicious emails. They're about the moments when someone we care about isn't sure what to believe.
Kevin Johnson, founder of LookSteady, shares why helping family members recognize scams should be simple, supportive, and free from embarrassment.
Read Kevin's story on Medium: The $499 Email That Could Fool Someone You Love