What to do if I shared my OTP in a phishing scam?

Immediately change your passwords and contact your bank's helpline. Report the incident on cybercrime.gov.in or call 1930 for further assistance.

How can I identify this specific PayPal scam?

Look for red flags such as calls from private numbers, pressure tactics, and requests for personal information like your 2FA code. Legitimate companies won't ask you to disclose sensitive information over the phone.

How do I report this type of scam in India?

You can report scams by calling the national cybercrime helpline at 1930 or by visiting cybercrime.gov.in. For bank-related fraud, contact your bank directly.

What steps should I take to recover money or protect my accounts after this scam?

Contact your bank and report any unauthorized transactions. Change passwords for compromised accounts and enable security alerts. Also, report to the cybercrime helpline for guidance.

PayPal UK Scam Call Attempting to Steal 2FA Code

INDIA — By BharatSecure Threat Intelligence Team · Updated Jun 10, 2026

Verdict: Suspicious | Risk Score: 7/10 | Severity: High

Category: phishing

Scam Intelligence: PayPal UK Scam Call Attempting to Steal 2FA Code

Proprietary signals from BharatSecure's scam-tracking database.

Last reported

Jun 10, 2026

How PayPal UK Scam Call Attempting to Steal 2FA Code Works

Scammers are making calls from private numbers, impersonating PayPal, and attempting to trick users into revealing their Two-Factor Authentication (2FA) codes. This tactic aims to gain unauthorized access to victims' PayPal accounts.

How This Scam Works — Detailed Explanation

Scammers typically find victims through targeted approaches using social media platforms, online marketplaces, and even phishing emails that may have come from compromised accounts. Once a potential target is identified, they often use private numbers to contact their victims, making it difficult for the victim to trace the call back to the scammer. They may go through various online forums or groups related to finance where individuals discuss payment issues, thereby locating users who might be experiencing problems with their PayPal accounts. In India, platforms like Facebook and WhatsApp are frequently monitored by scammers to identify individual users who engage in discussions about money transfer issues, enabling them to draw targets from those communities.

Upon initiating contact, the scammers’ first tactic is impersonation, claiming to be PayPal representatives. They often sound authoritative and well-informed about the victim’s account details, which adds credibility to their guise. Many victims report being pressured during the calls, with the scammer insisting that it is an urgent matter that requires immediate attention — leveraging fear as a psychological tactic. They typically ask victims to verify details or provide additional information, eventually leading the conversation towards the victim's Two-Factor Authentication (2FA) codes. By creating a false sense of trust and urgency, they manipulate victims into complying with their requests, often without realizing the severe implications.

Once the victim divulges their 2FA code, the scammer quickly takes over their PayPal account. This might involve transferring all available funds from the account to linked bank accounts, making use of UPI for instant transactions. For instance, a real case was reported where a victim lost ₹2 lakh from their PayPal account after revealing their 2FA code during a supposed verification call. The scammer then used the victim's Aadhaar details to link the PayPal account with a new UPI ID, transferring the victim's funds swiftly and leaving them without recourse inside their accounts. Victims often find it hard to regain access to their accounts once the scammers successfully execute the takeover, leaving them in complete despair.

The impact of such scams is significant in India. According to recent reports, over ₹500 crore has been lost to various types of scams and phishing attacks, including such targeted PayPal scams in the last year. The Ministry of Home Affairs (MHA) has even flagged the rising trend, urging citizens to be cautious about unsolicited calls, especially those claiming to be from legitimate services like PayPal. Additionally, CERT-In has issued advisories stressing the importance of verifying communications with financial institutions, emphasizing the need for enhanced awareness among citizens. Many victims, after losing their money, face emotional and financial stress, making it crucial for individuals to keep updated on such fraudulent tactics.

To distinguish between a genuine call from PayPal and a possible scam, it is vital to look for specific indicators. Real communications from PayPal will usually be from recognized numbers and will never ask for your 2FA code over the phone. Additionally, legitimate emails from PayPal will not request immediate action with threats. Cross-check any suspicious calls by contacting PayPal customer support directly through their official website or app. Be skeptical of any unsolicited calls and remember that it is perfectly reasonable to hang up and verify the information before taking any further action. Educating oneself about common scams like the PayPal UK scam call attempting to steal 2FA codes can greatly reduce the likelihood of falling victim to such fraudulent activities.

Visual Intelligence:

BharatSecure's AI has identified this as a used in scams targeting Indian users.

Who Does PayPal UK Scam Call Attempting to Steal 2FA Code Target?

General public across India

Red Flags — How to Identify PayPal UK Scam Call Attempting to Steal 2FA Code

PayPal
2FA
Two-Factor Authentication
private number
impersonation
account takeover
UK

What To Do If You Encounter PayPal UK Scam Call Attempting to Steal 2FA Code

Report the incident at cybercrime.gov.in or call the helpline 1930 immediately.
Contact PayPal support directly using their official website to report your experience.
Change your PayPal password and enable notifications for transactions.
Inform your bank about any unauthorized transactions that may have occurred.
Monitor your financial accounts closely for unusual activities.
Educate friends and family about this scam to spread awareness.

How to Report PayPal UK Scam Call Attempting to Steal 2FA Code in India

Call 1930 — National Cyber Crime Helpline (24x7)
File a complaint at cybercrime.gov.in
Contact your bank immediately if money was lost
Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What to do if I shared my OTP in a phishing scam?: Immediately change your passwords and contact your bank's helpline. Report the incident on cybercrime.gov.in or call 1930 for further assistance.
How can I identify this specific PayPal scam?: Look for red flags such as calls from private numbers, pressure tactics, and requests for personal information like your 2FA code. Legitimate companies won't ask you to disclose sensitive information over the phone.
How do I report this type of scam in India?: You can report scams by calling the national cybercrime helpline at 1930 or by visiting cybercrime.gov.in. For bank-related fraud, contact your bank directly.
What steps should I take to recover money or protect my accounts after this scam?: Contact your bank and report any unauthorized transactions. Change passwords for compromised accounts and enable security alerts. Also, report to the cybercrime helpline for guidance.

Related Scams in India

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.