PayPal shock in the mailbox: Why lawyers are suddenly demanding money—even though no one has ordered anything

Image: JHVEPhoto / Shutterstock.com

More and more PayPal customers can't believe their eyes: a letter from a lawyer, a reminder, a demand for payment. The accusation: online purchases that were allegedly not paid for. The only problem is that the people affected never ordered anything. Nevertheless, they are expected to pay.

What is behind this? And how should consumers respond now?

The insidious scam involving "guest payments"

Criminals are exploiting a feature that is actually intended to be convenient: PayPal guest payments. This allows customers to shop at certain online stores without having their own PayPal account. All that is required is a name, address, and IBAN.

This is precisely where the danger lies. Data leaks, phishing emails, dubious competitions, or insecure technology can quickly lead to this data falling into the wrong hands. Fraudsters enter the stolen data when making online purchases and select direct debit via PayPal. The money is then debited from the victim's account.

If the direct debit is later returned, PayPal creates a negative balance on an automatically generated "guest account." And then the trouble begins: reminders and collection letters start arriving in the mail.

Do those affected really have to pay?

In most cases, the clear answer is no.

If you have never opened a PayPal account and have not authorized any payments, you have generally not entered into any contract. This means that money that has been debited without your consent can be recovered. You have up to eight weeks to do so, even without giving a reason. In the case of clearly unauthorized debits, you have a much longer period of time to take action.

However, it is important to react quickly—and above all, not to pay prematurely out of fear.

How consumers can defend themselves effectively

Anyone who receives such a demand should object in writing and make it clear that no order has been placed. At the same time, it is advisable to retrieve the direct debit via your own bank.

Reporting the matter to the police may also be advisable. This documents the misuse of data and demonstrates to collection agencies that the matter will not be taken lightly.

Crucially, only a court order for payment—recognizable by its yellow envelope—is truly binding. Even then, there is a 14-day period for filing an objection.

This is how you can reduce the risk

Only give your IBAN to reputable merchants. Check your bank statements regularly. Activate payment notifications. And if suspicious debits become frequent, in extreme cases it may even be advisable to open a new bank account.

A critical view from us

The real scandal lies deeper: a system that allows payments to be made without genuine verification of consent is an open invitation to abuse. The damage initially falls on consumers—they have to defend themselves, object, and file complaints. Digital convenience must not lead to innocent people being forced into the role of debtors. Payment service providers need to take more responsibility here – not just fast technology, but also effective protection.

Sources: ruhr24.de, verbraucherzentrale.de