← All verdicts

Scam verdict · PayPal phishing lookalike

Is paypa1-secure-login.com a scam? Our verdict

97/ 100

Our verdict

Likely scam

paypa1-secure-login.com

Our verdict: this is a phishing page impersonating PayPal, and we rate it a near-certain scam. The domain swaps the letter “l” in “PayPal” for the number “1” (paypa1) and bolts on “secure-login” to look official — a typosquat built for one purpose: harvesting your PayPal password.

PayPal only ever logs you in at paypal.com. Any login box on a different domain is designed to capture your credentials and, often, a one-time 2FA code entered right after. If you type your details here, assume the attacker has your account within minutes.

Worried about a link of your own? Check it free

Paste any website or link below for an instant 0–100 scam risk score — free. The full report with all 5 red flags is $4.99.

Free risk-score preview · full report with all 5 red flags for $4.99 · no subscription

Top red flags we found

These are the signals behind our verdict on paypa1-secure-login.com.

1. Impersonation signals

high risk

The domain is a deliberate typosquat of paypal.com (“paypa1” + “secure-login”) using PayPal’s exact logo and colours.

2. Phishing markers

high risk

A full-page login form on a non-PayPal domain, reached from an urgent “your account is limited” email — the standard credential-harvest pattern.

3. Domain age

high risk

Registered days before the phishing campaign began, behind privacy protection — real PayPal domains are long-established and publicly owned.

4. Payment red flags

high risk

After “login” it asks you to “confirm” card and bank details to “restore” your account — legitimate providers never do this.

5. Fake-store patterns

high risk

No real product or service — the entire site exists only to collect your PayPal and card credentials.

What to do right now

  1. 1Never enter your PayPal password here — go directly to paypal.com instead.
  2. 2If you already entered details, change your PayPal password now and enable 2FA.
  3. 3Forward the phishing email to [email protected] and delete it.
For business owners

Is someone impersonating PayPal?

This case impersonates PayPal. Our $29 Brand Impersonation Audit finds the lookalike domains, typosquats and copycat sites targeting your brand — each with evidence and a risk rating — plus a ready-to-send takedown template. One-time, no subscription.

Run a brand audit — $29

More scam verdicts

→Is luxe-outlet-deals.shop a scam?→Is quantum-yield-capital.io a scam?→Is usps-redelivery-fee.help a scam?→Is trendhaven-gadgets.store a scam?

Check a link before you trust it

Spot the scam before it spots you. Get your instant risk score free, then the full report for just $4.99.

Check a link — free

This verdict is an illustrative case study of a documented scam pattern to help you recognise the warning signs — general guidance, not legal or financial advice. We check URLs and hand you an intelligence report; we don’t recover funds or execute takedowns. Questions? Email [email protected].