PayPal login URL: the real address
PayPal's real sign-in page is on www.paypal.com. If a link takes you anywhere else and asks for your PayPal password, close it. We opened each address below on 9 November 2026.
Every PayPal account signs in at www.paypal.com/signin
Domains PayPal uses
Not a complete list. Each address below can have subdomains in front of it (www., login.), and they are still PayPal's.
paypal.compaypalobjects.com
Real PayPal domains where anyone can publish
These belong to PayPal, but the pages on them are made by its customers. A sign-in form here is not PayPal's sign-in page.
| Address | Why | Live phishing URLs |
|---|---|---|
paypal. | PayPal.Me links belong to individual PayPal users, so the name after the slash is whoever created it. | 0 |
Live phishing URLs: any brand, counted in PhishTank's list on 5 November 2026.
How to read the address
Look at the part between https:// and the first single /. Read it from the right. The real thing ends in paypal.com or another domain listed below, with nothing but a dot before it.
https://login.paypal.com/…is PayPal: it ends in.paypal.com.https://paypal.com.account-check.example/…is not: it ends inaccount-check.example, and PayPal's name at the front is decoration.https://paypal-secure-login.example/…is not: a hyphen makes a different domain, and anyone can register one.
Everything after the first / is chosen by whoever made the page, so …/paypal.com/signin in the path proves nothing.
What fake PayPal pages looked like
On 5 November 2026, PhishTank listed 57 live, verified phishing URLs that its volunteers labelled PayPal.
- 93% used HTTPS. The padlock means the connection is encrypted, not that the site is PayPal.
- 10.5% had "paypal" in the hostname. Most fakes give no such clue, so the absence of PayPal's name doesn't make a link safe either.
- 33.3% sat on services anyone can sign up to, such as website builders, file sharing and QR-code links, rather than on a domain the attacker registered.
Hostnames from the same list that use PayPal's name without being PayPal's, newest first. Dots are written as [.] so none of them is a working link.
- paypal-transactions[.]sbs
- paypal3[.]vercel[.]app
- more-paypal[.]wixstudio[.]com
- payme-paypal[.]com
- www[.]paypal-banking[.]pro
- meinpaypal[.]lnc[.]gmbh
Report a fake PayPal email or page
Forward the whole email to phishing@paypal.com, then delete it. PayPal asks you not to change the subject line or send it as an attachment.
Source: PayPal: How do I report a fake PayPal email or website?, checked 9 November 2026.
Lures to watch for
- Anyone with a PayPal account can send a real invoice or money request from paypal.com, so a genuine PayPal email can carry a scammer's message. Never call a phone number written in an invoice note.
- Open the PayPal app or type paypal.com to check a payment. If it isn't in your activity there, it didn't happen.
Not sure about a link? Paste it into the free link checker. It reads the address only and doesn't open the page. The PhishClean browser extension also checks each page you open for signs of a fake sign-in form.
Questions
What is PayPal's official login URL?
www.paypal.com (Every PayPal account signs in at www.paypal.com/signin). A real PayPal address ends in paypal.com, paypalobjects.com, read from the right of the hostname.
How do I report a fake PayPal email or website?
Forward the whole email to phishing@paypal.com, then delete it. PayPal asks you not to change the subject line or send it as an attachment.
Do fake PayPal sites use PayPal's name in the address?
In PhishTank's list of live phishing URLs on 5 November 2026, 6 of the 57 URLs labelled PayPal (10.5%) had the brand's name in the hostname, so most gave no such clue. 93% used HTTPS, so a padlock proves nothing.
Can a phishing page be on a real PayPal domain?
Yes. paypal.me belongs to PayPal, but the pages there are made by its customers, so a sign-in form there is not PayPal's sign-in page. PhishTank's list on 5 November 2026 held 0 live phishing URLs on it.
How we checked
- Sign-in addresses: opened on 9 November 2026 and followed through every redirect to where the sign-in page loads.
- Phishing numbers: PhishTank's online-valid list, downloaded 5 November 2026. Only URLs its volunteers labelled PayPal count, and many fakes are labelled "Other", so these are a sample. We didn't open any of them. Data shared under CC BY-SA 2.5; method as in our phishing URL statistics.
- Example hostnames: hostnames in the whole list that contain "paypal" but aren't on PayPal's domains, one per domain.
See also: official sign-in addresses of 15 brands.
Last updated: , when the sign-in addresses were checked.