A PayPal notification saying someone sent you $0.01 can look harmless. It is only one cent, so most people would not treat it as a serious financial threat.
That is exactly why scammers use it.
The PayPal $0.01 scam uses tiny payments to deliver fake warnings, fake support messages, and alarming claims about pending charges. The goal is not to give you money. The goal is to make you call a scam phone number, click a phishing link, install remote access software, or follow instructions from criminals pretending to be PayPal support.
Scam Overview
The PayPal $0.01 scam is a small-deposit scam where fraudsters send victims a tiny PayPal payment, usually $0.01, and attach a message designed to create fear or confusion.
The sender may appear as a random person, a fake company, a billing department, a refund service, or a name that looks vaguely official. Scammers may change the sender name constantly to avoid easy detection.
In some versions, the payment note claims that a much larger charge is pending. It may mention Coinbase, cryptocurrency, a PayPal debit card, a subscription renewal, a refund confirmation, account verification, or suspicious activity.
A typical scam message may say something like:
- “A charge of $987.90 is pending.”
- “If you did not authorize this payment, call customer support.”
- “This small deposit confirms your account.”
- “Your PayPal account has been linked to Coinbase.”
- “Suspicious activity detected.”
- “Contact PayPal support immediately.”
The $0.01 payment is the bait. The attached message is the real attack.
This scam is more deceptive than a normal phishing email because the alert may appear inside the victim’s real PayPal account activity. That makes the message feel more believable. People are trained to distrust random emails, but they may lower their guard when they see a transaction inside PayPal itself.
Scammers exploit that trust.
A tiny incoming payment does not mean the message is legitimate. PayPal transaction notes can be abused by scammers to place fake warnings, fake phone numbers, and fake instructions in front of victims.
The scam usually has one purpose: to push the victim outside PayPal’s official support system.
If the victim calls the number in the note, they may reach a fake call center. The person answering may claim to work for PayPal, Coinbase, a bank, a fraud department, or a billing company.
The fake agent may say the victim’s account is compromised, a large payment is about to go through, or a hacker has gained access. Then they may ask the victim to install remote access software such as AnyDesk, TeamViewer, UltraViewer, Zoho Assist, RustDesk, or another screen-sharing tool.
That is a major red flag.
PayPal does not need remote access to your device to cancel a payment, review an account, or process a refund.
Once scammers gain remote access, they may try to view your screen, steal login details, see banking information, manipulate browser pages, or pressure you into transferring money. They may claim they are processing a refund, then say they accidentally refunded too much. They may ask you to send the difference back through gift cards, crypto, wire transfer, or payment apps.
Other scammers use the “safe account” trick. They claim your bank account is under attack and tell you to move money to a secure account. There is no secure account. The money goes to the scammers.
The PayPal $0.01 scam may also include phishing links. Instead of a phone number, the note or follow-up message may direct victims to a fake PayPal login page. If the victim enters their email, password, or verification code, scammers can attempt to access the account.
Some versions target Coinbase users or people worried about crypto charges. Others mention fake invoices, subscriptions, Norton, Geek Squad, Microsoft, Apple, or other well-known brands. The wording changes, but the structure remains the same.
A tiny payment is sent. A frightening message is attached. The victim is told to act quickly. The scammer tries to steal money, credentials, or device access.
The scam works because it creates a contradiction. You received money, even if it is only $0.01, so it may not feel like a scam at first. But the message attached to that payment can be dangerous. It may be designed to make you panic about a much larger financial problem.
The safest approach is simple: do not trust phone numbers, links, or support instructions inside unexpected PayPal payment notes.
If there is a real issue with your PayPal account, you can check it by logging into PayPal directly through the official app or website. Do not use links from the message. Do not call numbers listed in transaction notes. Do not install remote access software. Do not send money to cancel a charge. Do not buy gift cards.
The $0.01 payment is not the threat by itself. The scam begins when you react to the fake warning.
How the PayPal $0.01 Scam Works
1. Scammers Send a Tiny PayPal Payment
The scam begins when a fraudster sends a tiny payment, usually $0.01, to a PayPal user.
This amount is intentionally small. It is enough to trigger a notification and appear in PayPal activity, but not enough to make the victim think they have lost money.
That is the trick.
Because the victim receives money rather than loses money, the transaction may not feel dangerous. The victim may simply wonder why a stranger sent them one cent.
This curiosity pushes them to open the transaction and read the note.
2. The Sender Uses a Random Name or Fake Company
The sender may appear as an individual, a company, a support department, or a billing service. The name can change from scam to scam.
Scammers may use:
- Random personal names
- Fake company names
- Crypto-related names
- Billing department labels
- Refund department labels
- Customer support-style names
- Compromised PayPal accounts
Do not rely only on the sender name to decide whether the payment is safe. Scammers rotate names constantly.
The suspicious part is the unexpected tiny payment combined with an urgent or alarming message.
3. The Payment Note Creates Panic
The transaction note is the main weapon.
It may claim that a large charge is pending, that your account has been verified for a payment, or that you must contact support if you did not authorize something.
The note may mention:
- Coinbase
- Bitcoin or crypto purchases
- PayPal billing
- Unauthorized transactions
- Suspicious activity
- Refund confirmation
- Account verification
- Subscription renewal
- Fake invoices
- Account restrictions
The message is designed to make you think something serious is happening.
For example, the note may say a $987.90 Coinbase charge is pending. The victim received only $0.01, but the note points to a much larger financial threat.
This fear is what drives the next step.
4. The Message Pushes You to Call Fake Support
Many PayPal $0.01 scam messages include a phone number. The note may say to call PayPal support, billing support, Coinbase support, or fraud prevention if you did not authorize the charge.
That phone number is not PayPal.
It connects to scammers.
Phone calls are valuable to scammers because they can pressure victims in real time. A fake support agent can sound calm, professional, and helpful. They can answer questions, repeat official-sounding language, and make the victim feel that the situation is urgent.
The scammer may say:
- “Yes, we see suspicious activity.”
- “Your account has been compromised.”
- “A large payment is pending.”
- “A hacker connected your PayPal to Coinbase.”
- “We must secure your account immediately.”
- “Do not hang up during this process.”
These statements are meant to keep the victim afraid and dependent on the caller.
5. The Scam Turns Into Fake Tech Support
After the victim calls, the scam may shift from a PayPal issue into a fake tech support emergency.
The scammer may claim the victim’s computer or phone is infected. They may say hackers are using the device to access PayPal. They may claim they need to check the device before canceling the charge.
Then they ask the victim to install remote access software.
Common apps abused in these scams include:
- AnyDesk
- TeamViewer
- UltraViewer
- Zoho Assist
- RustDesk
- LogMeIn
- ScreenConnect
These apps are legitimate tools when used by real support teams, but scammers use them to view and control a victim’s device.
A real PayPal representative will not ask you to install remote access software to resolve a payment issue.
6. Scammers Ask You to Open PayPal, Email, or Banking Apps
Once remote access is active, scammers may ask the victim to open PayPal, email, online banking, credit card accounts, or Coinbase.
They may claim this is needed to:
- Cancel the pending charge
- Verify the refund
- Check for unauthorized activity
- Secure the bank account
- Confirm identity
- Remove hackers
This is extremely risky.
If the scammer can see your screen, they may capture sensitive information. They may observe account balances, login details, card information, transaction history, email codes, and security prompts.
They may use this information to steal money or prepare future attacks.
7. The Fake Refund Trick May Begin
One of the most common scams after remote access is the fake refund trick.
The scammer pretends to issue a refund, then claims they accidentally refunded too much. For example, they may say they meant to refund $10 but accidentally sent $1,000.
They may use fake pages or screen manipulation to make it look like your bank balance changed.
Then they pressure you to send back the “extra” money.
They may ask for repayment through:
- Gift cards
- Cryptocurrency
- Wire transfer
- Bank transfer
- Payment apps
- Cash deposits
The refund was never real. The “extra money” story is invented to make you send your own money to the scammers.
8. They May Use the Safe Account Trick
Another common method is the safe account scam.
The fake PayPal agent claims your bank account is compromised. They may say hackers are about to drain your account and that your money must be moved to a secure holding account.
This is false.
The so-called safe account belongs to the scammer or someone working with them.
No real PayPal employee, bank worker, or fraud investigator will tell you to move money to a separate account to protect it.
9. Gift Cards May Be Requested
Scammers often ask victims to buy gift cards because gift card codes are fast and hard to recover.
They may say gift cards are needed for:
- Verification
- Refund processing
- Charge cancellation
- Security deposits
- Account unlocking
- Reversing a payment error
This is always a scam.
PayPal will never ask you to buy gift cards to fix an account issue or cancel a transaction.
10. The Scammer Tries to Keep You Isolated
During the call, the scammer may tell you not to contact your bank, PayPal, family, or friends. They may claim the case is confidential or that speaking to anyone could interrupt the refund.
This is a manipulation tactic.
Scammers isolate victims because another person may recognize the scam quickly.
If someone on the phone tells you not to verify the issue independently, treat that as a clear warning sign.
Common Variations of the PayPal $0.01 Scam
Coinbase Pending Charge Version
The note claims a large Coinbase charge is pending. This version uses fear around cryptocurrency transactions, which many people believe are difficult to reverse.
Fake PayPal Support Version
The payment note includes a fake PayPal customer support number. Victims who call are connected to scammers.
Fake Invoice or Subscription Version
The note claims a subscription, invoice, or renewal is pending. It may mention a well-known brand to make the threat seem familiar.
Fake Refund Version
The message claims that the $0.01 payment is connected to a refund confirmation. If the victim calls, scammers may use the over-refund trick.
Fake Company Version
The sender appears as a company or department. The name may be completely fake or designed to resemble a real organization.
Phishing Link Version
Instead of a phone number, the note or follow-up message includes a link to a fake PayPal login page. This is used to steal credentials.
Red Flags of the PayPal $0.01 Scam
Watch for these warning signs:
- You receive $0.01 from someone you do not know.
- The sender uses a random name or fake company.
- The transaction note mentions a large pending charge.
- The message references Coinbase, crypto, refunds, invoices, or account verification.
- The note includes a phone number for support.
- The message says you must act immediately.
- The caller claims your device is hacked.
- The caller asks you to install AnyDesk, TeamViewer, or similar software.
- You are asked to log into your bank while on the call.
- You are told to buy gift cards or send crypto.
- You are told to move money to a safe account.
- You are warned not to contact PayPal or your bank directly.
The clearest red flags are remote access, gift cards, crypto payments, bank transfers, and secrecy.
What To Do If You Receive a PayPal $0.01 Payment
1. Do Not Panic
A suspicious $0.01 payment does not automatically mean your account has been hacked. Scammers often use tiny payments only to deliver fake messages.
Stay calm and verify through official channels.
2. Do Not Call the Number in the Note
If the transaction note includes a phone number, do not call it. Scammers use fake support numbers to move the scam from PayPal into a live phone conversation.
3. Do Not Click Links
Do not click links in the payment note, email notification, text message, or any related message.
Open PayPal directly through the official app or by typing the address into your browser.
4. Check Your PayPal Account Directly
Log into PayPal safely and review your account activity.
Check for:
- Unknown outgoing payments
- Pending transactions
- Linked bank accounts
- Linked cards
- Automatic payments
- Login activity
- Account changes
- Security alerts
If you do not see a real outgoing charge, the note was likely scare bait.
5. Report the Payment to PayPal
Report the suspicious transaction through PayPal’s official Help Center or Resolution Center.
Include the sender name, transaction ID, amount, message text, phone number, and any links included in the note.
6. Do Not Reply to the Sender
Do not contact the sender directly. Do not ask who they are. Do not send them more information.
If you are unsure whether to refund the $0.01, ask PayPal through official support.
7. Secure Your PayPal Account
Change your PayPal password if anything seems suspicious. Enable two-factor authentication.
Also check your account settings to make sure your email, phone number, linked cards, and linked bank accounts are correct.
What To Do If You Called the Fake Support Number
1. Hang Up Immediately
End the call. Do not continue the conversation, even if the caller sounds professional or threatens that your account will be locked.
2. Do Not Follow Any More Instructions
Do not install apps. Do not open your bank. Do not buy gift cards. Do not send crypto. Do not transfer money.
3. Disconnect Your Device From the Internet
If you installed remote access software, disconnect from WiFi or mobile data. This can stop an active remote session.
4. Remove Remote Access Software
Uninstall any app the caller told you to install, such as AnyDesk, TeamViewer, UltraViewer, Zoho Assist, RustDesk, LogMeIn, or ScreenConnect.
Restart your device after removing it.
5. Change Passwords From a Clean Device
Use another trusted device to change passwords for important accounts.
Start with:
- PayPal
- Online banking
- Credit card accounts
- Coinbase or crypto accounts
- Password manager
- Shopping accounts
Use strong, unique passwords.
6. Contact Your Bank
If you opened your bank account during the call, shared card details, sent money, or bought gift cards, contact your bank immediately.
Use the phone number on the back of your card or inside your official banking app.
Ask them to review your account, block suspicious transactions, replace cards, and add extra security if needed.
7. Report Gift Card Fraud
If you bought gift cards and gave the codes to scammers, contact the gift card company immediately.
Have your receipt and card numbers ready. Ask whether the balance can be frozen.
8. Run a Security Scan
Scan your device with trusted security software. Check for unknown apps, suspicious browser extensions, and recent downloads.
If the scammer had full remote access, consider having the device inspected by a trusted technician.
9. Report the Scam
Report the scam to PayPal. If Coinbase, a bank, or another company was impersonated, report it to them as well.
If money was stolen, report the incident to your local police, consumer protection agency, or cybercrime reporting center.
Is Your Device Infected? Run a Free Malware Scan
Slow performance, constant pop-ups, or strange behavior? These are classic signs of a malware infection. The fastest way to find out is to scan your device with Malwarebytes Free — one of the most trusted malware removal tools available.
The free version detects and removes the most common threats, including:
- Adware — the cause of those annoying pop-ups
- Browser hijackers — unwanted redirects and changed homepages
- Trojans and spyware — hidden programs stealing your data
- Potentially unwanted programs (PUPs) — software you never asked for
👉 Select your device below — Windows, Mac, or Android — then follow the simple steps to download Malwarebytes, scan your system, and remove any threats it finds. The scan usually takes 5 to 20 minutes.
Run a Malware Scan with Malwarebytes for Windows
Malwarebytes is one of the most popular and trusted anti-malware tools for Windows — and it’s completely free for removing infections. It catches threats that many antivirus programs miss, including adware, browser hijackers, and trojans. Follow the steps below to scan and clean your PC in just a few minutes.
Download Malwarebytes
Click the button below to download the latest version of Malwarebytes for Windows from the official source. The free version is all you need — it will scan your computer and remove adware, browser hijackers, and other malicious software at no cost.
Download MalwarebytesOfficial installer for Windows 11 and 10. Your download starts right away.Want real-time protection? See Malwarebytes Premium
Malwarebytes Free for WindowsScans and removes malware at no cost-
Install Malwarebytes
When the download finishes, open your Downloads folder and double-click the MBSetup file. If Windows shows a User Account Control pop-up, click “Yes” to allow the installation.
Follow the On-Screen Prompts to Install Malwarebytes
The setup wizard will walk you through a few quick screens:
-
Choose where you’re installing the program — “Personal Computer” or “Work Computer” — then click Next.
-
Malwarebytes will now install on your device. This usually takes under a minute.
-
When installation is complete, the “Welcome to Malwarebytes” screen will open automatically.
-
On the final screen, click Open Malwarebytes to launch the program.
-
Enable “Scan for Rootkits”
Before scanning, turn on rootkit detection so Malwarebytes can find even the most hidden threats. Click the Settings gear icon on the left side of the screen.
In the settings menu, find “Scan for rootkits” and click the toggle so it turns blue.
Done? Click “Dashboard” in the left pane to return to the main screen.
Start the Scan
Click the blue Scan button. Malwarebytes will automatically update its virus database and start checking your computer for malware.
-
Wait for the Scan to Finish
The scan checks your entire system for browser hijackers and other malicious programs, so it can take 5 to 20 minutes depending on your computer. Feel free to do something else — just check back occasionally to see the progress.
-
Quarantine the Detected Threats
When the scan is done, you’ll see a list of everything Malwarebytes found — malware, adware, and potentially unwanted programs. Click the “Quarantine” button to remove all of them at once.
Malwarebytes will now remove the malicious files and registry entries and move them safely into quarantine.
-
Restart Your Computer
Some threats can only be fully removed after a reboot. If Malwarebytes asks you to restart, click Yes. Once you’re logged back in, Malwarebytes has finished removing the threats it found.
That’s it — your Windows PC is now clean of trojans, adware, and other malware, and should be back to running smoothly.
If you are still having problems with your computer after completing these instructions, then please follow one of the steps:
- Run a computer scan with ESET Online Scanner
- Ask for help in our Windows Malware Removal Help & Support forum.
Run a Malware Scan with Malwarebytes for Mac
Malwarebytes for Mac is a free on-demand scanner that removes the malware other security software tends to miss — adware, browser hijackers, and unwanted programs included. Cleaning an infected Mac with Malwarebytes has always been completely free, and it’s our go-to recommendation. Follow the steps below to scan and clean your Mac in just a few minutes.
-
Download Malwarebytes for Mac
Click the button below to download the latest version of Malwarebytes for Mac.
Download MalwarebytesOfficial installer for macOS. Your download starts right away.Want real-time protection? See Malwarebytes PremiumMalwarebytes Free for MacScans and removes malware at no cost -
Open the Malwarebytes setup file
When the download finishes, open your Downloads folder and double-click the setup file to begin the installation.
-
Follow the On-Screen Prompts to Install Malwarebytes
The Malwarebytes for Mac Installer will guide you through a few quick screens. Click “Continue” and keep following the prompts until the installation completes.
When the installation is complete, Malwarebytes opens to the Welcome to Malwarebytes screen. Click “Get started“.
-
Select “Personal Computer” or “Work Computer”
Malwarebytes will ask what type of computer you’re installing it on. Click either Personal Computer or Work Computer, whichever applies.
-
Start the Scan
Click the “Scan” button. Malwarebytes will automatically update its detection database and begin checking your Mac for malware.
-
Wait for the Scan to Finish
Malwarebytes will scan your Mac for adware, browser hijackers, and other malicious programs. This can take a few minutes, so feel free to do something else — just check back occasionally to see the progress.
-
Quarantine the Detected Threats
When the scan is done, you’ll see a list of everything Malwarebytes found. Click the “Quarantine” button to remove all the threats at once.
-
Restart Your Mac
Malwarebytes will now remove all the malicious files it found. Some threats can only be fully removed after a reboot — if Malwarebytes asks you to restart, allow it. Once you’re logged back in, your Mac is clean.
That’s it — your Mac is now free of adware, rogue browser extensions, and other potentially harmful software.
If you are still experiencing problems while trying to remove a malicious program from your computer, please ask for help in our Mac Malware Removal Help & Support forum.
Run a Malware Scan with Malwarebytes for Android
Malwarebytes for Android automatically detects and removes dangerous threats like malware and ransomware so you don’t have to worry about your most-used device being compromised. Aggressive detection of adware and potentially unwanted programs keeps your Android phone or tablet running smooth.
-
Download Malwarebytes for Android.
You can download Malwarebytes for Android by clicking the link below.
Get Malwarebytes for AndroidOpens Google Play in a new tab.Want real-time protection? See Malwarebytes Premium for AndroidMalwarebytes for AndroidScans your phone and removes malware at no cost -
Install Malwarebytes for Android on your phone.
In the Google Play Store, tap “Install” to install Malwarebytes for Android on your device.
When the installation process has finished, tap “Open” to begin using Malwarebytes for Android. You can also open Malwarebytes by tapping on its icon in your phone menu or home screen.
-
Follow the on-screen prompts to complete the setup process
When Malwarebytes will open, you will see the Malwarebytes Setup Wizard which will guide you through a series of permissions and other setup options.
This is the first of two screens that explain the difference between the Premium and Free versions. Swipe this screen to continue.
Tap on “Got it” to proceed to the next step.
Malwarebytes for Android will now ask for a set of permissions that are required to scan your device and protect it from malware. Tap on “Give permission” to continue.
Tap on “Allow” to permit Malwarebytes to access the files on your phone.
-
Update database and run a scan with Malwarebytes for Android
You will now be prompted to update the Malwarebytes database and run a full system scan.
Click on “Update database” to update the Malwarebytes for Android definitions to the latest version, then click on “Run full scan” to perform a system scan.
-
Wait for the Malwarebytes scan to complete.
Malwarebytes will now start scanning your phone for adware and other malicious apps. This process can take a few minutes, so we suggest you do something else and periodically check on the status of the scan to see when it is finished.
-
Click on “Remove Selected”.
When the scan has been completed, you will be presented with a screen showing the malware infections that Malwarebytes for Android has detected. To remove the malicious apps that Malwarebytes has found, tap on the “Remove Selected” button.
-
Restart your phone.
Malwarebytes for Android will now remove all the malicious apps that it has found. To complete the malware removal process, Malwarebytes may ask you to restart your device.
That’s it — your Android phone is now clean — no more malicious apps, adware, or browser redirects.
If you are still having problems with your phone after completing these instructions, then please follow one of the steps:
- Restore your phone to factory settings by going to Settings > General management > Reset > Factory data reset.
- Ask for help in our Mobile Malware Removal Help & Support forum.
Stay Protected: Block Ads and Malicious Sites
Now that your device is clean, keep it that way. Most infections start with a malicious ad or a fake download button — so blocking them at the source is your best defense.
We recommend AdGuard, which blocks malicious ads, phishing pages, and dangerous redirects before they can reach you.
👉 Download AdGuard and browse safely
How to Protect Yourself From PayPal $0.01 Scams
Use these safety rules whenever you receive an unexpected PayPal payment:
- Treat unexpected payment notes as untrusted.
- Never call phone numbers included in suspicious transaction notes.
- Never click links from unexpected PayPal messages.
- Use only the official PayPal app or website.
- Do not install remote access software for payment disputes.
- Do not buy gift cards to cancel payments or process refunds.
- Do not send crypto to reverse a transaction.
- Do not log into your bank while a stranger is on the phone.
- Enable two-factor authentication on PayPal and email.
- Use unique passwords for financial accounts.
- Report suspicious payments to PayPal.
The safest move is to step away from the message and verify independently.
FAQ
What is the PayPal $0.01 scam?
It is a scam where fraudsters send a tiny PayPal payment, usually $0.01, and attach a fake warning or support message. The goal is to make you call fake support, click a phishing link, or follow instructions that lead to theft.
Why would scammers send me $0.01?
They use the tiny payment to get your attention and place a message inside your PayPal activity. The money is bait. The attached message is the scam.
Can scammers steal my account by sending $0.01?
The payment itself does not give them access. The danger comes if you call them, click links, share information, install remote access software, or send money.
Should I call the number in the PayPal note?
No. Do not call any phone number included in a suspicious PayPal transaction note. Contact PayPal only through the official app or website.
What if the note says a large charge is pending?
Log into PayPal directly and check your account activity. Do not use links or phone numbers from the message.
Will PayPal ask me to install AnyDesk or TeamViewer?
No. PayPal will not ask you to install remote access software to cancel a charge, process a refund, or secure your account.
Should I refund the $0.01?
Do not manually interact with the sender unless PayPal instructs you through official support. Report the suspicious transaction first.
What if I clicked a link?
Close the page, do not enter more information, and change your PayPal password from a clean device. If you entered your password, enable two-factor authentication and contact PayPal.
What if I gave scammers remote access?
Disconnect from the internet, remove the remote access app, change passwords from a clean device, contact your bank if financial accounts were opened, and scan your device.
Can I get my money back if I was scammed?
It depends on how the money was sent and how quickly you report it. Contact your bank, PayPal, card issuer, or gift card company immediately. Fast reporting gives you the best chance.
The Bottom Line
The PayPal $0.01 scam uses a tiny payment to make a fake warning feel more believable. Scammers may use random names, fake companies, fake support numbers, Coinbase claims, refund messages, or account security warnings to trick victims.
The one-cent payment is not the real danger. The real danger is calling the fake number, clicking the fake link, installing remote access software, or sending money under pressure.
If you receive a suspicious $0.01 PayPal payment, do not react through the message. Log into PayPal directly, check your account, report the transaction, and secure your login.
A real PayPal issue can be handled through official PayPal channels. A random $0.01 deposit with an urgent warning is a scam signal.
Join the discussion
0 commentsShare your experience or ask a question about this article.
Discussion
Start the conversation
Have a question or something useful to share? Add the first comment.