# PayPal login URL: the real address > PayPal's real sign-in page is on www.paypal.com. How to tell a fake PayPal link from the real one, with examples from 57 live phishing URLs. Canonical: https://www.phishclean.com/official-domains/paypal Last updated: 2026-11-09 PayPal's real sign-in page is on www.paypal.com. If a link takes you anywhere else and asks for your PayPal password, close it. We opened each address below on 9 November 2026. www.paypal.com Every PayPal account signs in at www.paypal.com/signin ## Domains PayPal uses Not a complete list. Each address below can have subdomains in front of it (`www.`, `login.`), and they are still PayPal's. - `paypal.com` - `paypalobjects.com` ## Real PayPal domains where anyone can publish These belong to PayPal, but the pages on them are made by its customers. A sign-in form here is not PayPal's sign-in page. | Address | Why | Live phishing URLs | | --- | --- | --- | | `paypal.me` | PayPal.Me links belong to individual PayPal users, so the name after the slash is whoever created it. | 0 | Live phishing URLs: any brand, counted in PhishTank's list on 5 November 2026. ## How to read the address Look at the part between `https://` and the first single `/`. Read it from the right. The real thing ends in `paypal.com` or another domain listed below, with nothing but a dot before it. - `https://login.paypal.com/…` is PayPal: it ends in `.paypal.com`. - `https://paypal.com.account-check.example/…` is not: it ends in `account-check.example`, and PayPal's name at the front is decoration. - `https://paypal-secure-login.example/…` is not: a hyphen makes a different domain, and anyone can register one. Everything after the first `/` is chosen by whoever made the page, so `…/paypal.com/signin` in the path proves nothing. ## What fake PayPal pages looked like On 5 November 2026, PhishTank listed 57 live, verified phishing URLs that its volunteers labelled PayPal. - **93%** used HTTPS. The padlock means the connection is encrypted, not that the site is PayPal. - **10.5%** had "paypal" in the hostname. Most fakes give no such clue, so the absence of PayPal's name doesn't make a link safe either. - **33.3%** sat on services anyone can sign up to, such as website builders, file sharing and QR-code links, rather than on a domain the attacker registered. Hostnames from the same list that use PayPal's name without being PayPal's, newest first. Dots are written as `[.]` so none of them is a working link. - paypal-transactions[.]sbs - paypal3[.]vercel[.]app - more-paypal[.]wixstudio[.]com - payme-paypal[.]com - www[.]paypal-banking[.]pro - meinpaypal[.]lnc[.]gmbh ## Report a fake PayPal email or page Forward the whole email to phishing@paypal.com, then delete it. PayPal asks you not to change the subject line or send it as an attachment. Source: [PayPal: How do I report a fake PayPal email or website?](https://www.paypal.com/us/smarthelp/article/How-do-I-report-a-fake-PayPal-email-or-website-FAQ438), checked 9 November 2026. ## Lures to watch for - Anyone with a PayPal account can send a real invoice or money request from paypal.com, so a genuine PayPal email can carry a scammer's message. Never call a phone number written in an invoice note. - Open the PayPal app or type paypal.com to check a payment. If it isn't in your activity there, it didn't happen. Not sure about a link? Paste it into the [free link checker](https://www.phishclean.com/check-link). It reads the address only and doesn't open the page. The [PhishClean browser extension](https://www.phishclean.com/) also checks each page you open for signs of a fake sign-in form. ## Questions ### What is PayPal's official login URL? www.paypal.com (Every PayPal account signs in at www.paypal.com/signin). A real PayPal address ends in paypal.com, paypalobjects.com, read from the right of the hostname. ### How do I report a fake PayPal email or website? Forward the whole email to phishing@paypal.com, then delete it. PayPal asks you not to change the subject line or send it as an attachment. ### Do fake PayPal sites use PayPal's name in the address? In PhishTank's list of live phishing URLs on 5 November 2026, 6 of the 57 URLs labelled PayPal (10.5%) had the brand's name in the hostname, so most gave no such clue. 93% used HTTPS, so a padlock proves nothing. ### Can a phishing page be on a real PayPal domain? Yes. paypal.me belongs to PayPal, but the pages there are made by its customers, so a sign-in form there is not PayPal's sign-in page. PhishTank's list on 5 November 2026 held 0 live phishing URLs on it. ## How we checked - **Sign-in addresses:** opened on 9 November 2026 and followed through every redirect to where the sign-in page loads. - **Phishing numbers:** [PhishTank](https://phishtank.org/)'s online-valid list, downloaded 5 November 2026. Only URLs its volunteers labelled PayPal count, and many fakes are labelled "Other", so these are a sample. We didn't open any of them. Data shared under [CC BY-SA 2.5](https://creativecommons.org/licenses/by-sa/2.5/); method as in our [phishing URL statistics](https://www.phishclean.com/research/phishing-urls). - **Example hostnames:** hostnames in the whole list that contain "paypal" but aren't on PayPal's domains, one per domain. See also: [official sign-in addresses of 15 brands](https://www.phishclean.com/official-domains). Last updated: 9 November 2026, when the sign-in addresses were checked.