iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
A PayPal security-code text can be part of a legitimate identity check, but an unexpected text does not show who initiated it or prove that anyone accessed your account. Don’t click a link or share the code. Open the PayPal app or enter PayPal’s address yourself to check your account safely.
Why might PayPal send a security-code text?
PayPal may ask you to confirm your identity when it detects new or unusual activity, such as a login from a new device or a different location. A text is one of several possible verification methods; PayPal also lists phone calls, identity questions, card confirmation, email, and push notifications.
PayPal’s US Help Center describes more than one SMS flow: one may ask you to confirm activity, while another sends a six-digit code to enter on the PayPal screen. In the latter flow, the code expires after 5–10 minutes. That description does not mean every unexpected PayPal text uses the same process.
A message could also be suspicious or sent to the wrong number. The text alone cannot tell you whether a real login attempt occurred, whether the message is genuine, or who initiated it.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
What to do if you didn’t request the code
- Don’t share the code or follow a text link. Keep the code, password, and other account details to yourself. Links and caller ID can be misleading.
- Open PayPal directly. Use the official app or type PayPal’s address into your browser. Check recent account activity there rather than through a link in the message.
- If you have an account and the login wasn’t yours, change your password. PayPal’s UK guidance recommends changing it immediately when an account holder receives an unexpected login text. The text is a reason to secure your account, not proof that a login succeeded.
- Report a suspicious SMS. PayPal’s US guidance says to forward it to phishing@paypal.com, then block the sender and delete the message.
If you don’t have a PayPal account
PayPal’s UK Help Center says an unexpected login text received by someone without an account is most likely a phishing message sent to a random phone number. You can ignore it. Don’t click links, reply with personal information, or share any code.
Recognize requests that aren’t legitimate
Someone pretending to be PayPal support may try to pressure you into revealing a validation code or password. PayPal says customer-service impersonators asking for these details are not legitimate. Treat requests to provide a code or password, transfer money, or install software as suspicious. Contact PayPal through its Help Center instead of using contact details or links in the message.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
How PayPal’s advice varies by region
The security-check methods and 5–10-minute code expiry described above come from PayPal’s US Help Center. The password-change recommendation for account holders who didn’t initiate a login, and the guidance for people without accounts, come from PayPal’s UK Help Center. The SMS reporting instructions are from PayPal US. Wording, short codes, and support processes can vary by region.
Quick Recap
Best Value
- The information below is per-pack only
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
- PayPal US: Why do I have to complete a security check?
- PayPal US: How to Report Suspicious Emails & Messages
- PayPal UK: Why am I receiving emails or texts from PayPal when I don’t have an account?
- PayPal US: How to Detect Phishing Scams
- PayPal US: Avoiding Common Types of Scams
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
