# PayPal one-cent scam: what do I do with the penny? **URL:** \ **Category:** Factual Questions\ **Created:** [July 2, 2025, 2:35pm UTC](https://boards.straightdope.com/t/paypal-one-cent-scam-what-do-i-do-with-the-penny/1020401 "2025-07-02T14:35:43Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![Briny\_Deep](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/briny_deep/32/17188_2.png) [@Briny\_Deep](https://boards.straightdope.com/u/Briny_Deep)\ **Post date:** [July 2, 2025, 2:35pm UTC](https://boards.straightdope.com/t/paypal-one-cent-scam-what-do-i-do-with-the-penny/1020401/1 "2025-07-02T14:35:43Z")
I received a very scammy-sounding email informing me of a refund of overpayment in the amount of $0.01. The penny really is in my PayPal account. I have no other cash balance. Obviously I’m not clicking on any links from the payer. I forwarded the notification email to [phishing@paypal.com](mailto:phishing@paypal.com). But what do I do with the penny itself - just leave it there forever? Amazingly, PayPal’s list of common scams does not include this case. ---
**Author:** ![Duckster](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/duckster/32/1244_2.png) [@Duckster](https://boards.straightdope.com/u/Duckster)\ **Post date:** [July 2, 2025, 2:42pm UTC](https://boards.straightdope.com/t/paypal-one-cent-scam-what-do-i-do-with-the-penny/1020401/2 "2025-07-02T14:42:29Z")
The penny over-payment is a well known scam. It’s also called a “carding” scam. Ignore the penny. ---
**Author:** ![Marvin\_the\_Martian](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/marvin_the_martian/32/2898_2.png) [@Marvin\_the\_Martian](https://boards.straightdope.com/u/Marvin_the_Martian)\ **Post date:** [July 2, 2025, 2:46pm UTC](https://boards.straightdope.com/t/paypal-one-cent-scam-what-do-i-do-with-the-penny/1020401/3 "2025-07-02T14:46:09Z")
Years ago I got a refund check for a few cents in the mail. Might even have been for one cent. I assume some automated system generated it. I never cashed it, daydreaming about screwing up their bank reconciliation. So a one cent refund payment isn’t in itself unheard of. I can’t address the “scammy” tone of the email. If it has internal links it is encouraging you to click on I assume the scam is that they made the one cent deposit to convince you that the email is legit. May be rare because unlike most phishing schemes his one actually costs money per attempt and might be more targeted. ---
**Author:** ![Mangetout](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/mangetout/32/19_2.png) [@Mangetout](https://boards.straightdope.com/u/Mangetout)\ **Post date:** [July 2, 2025, 2:46pm UTC](https://boards.straightdope.com/t/paypal-one-cent-scam-what-do-i-do-with-the-penny/1020401/4 "2025-07-02T14:46:47Z")
I’ve never heard of this specific scenario - at least not with PayPal as the receiving account. I would be very wary about what happens _next_ - this might be step 1 in a more complex scam where someone claiming to be from PayPal phones you (saying there has been an error) and tries to get you to do something that will cost you or breach your personal information. ---
**Author:** ![Mangetout](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/mangetout/32/19_2.png) [@Mangetout](https://boards.straightdope.com/u/Mangetout)\ **Post date:** [July 2, 2025, 2:48pm UTC](https://boards.straightdope.com/t/paypal-one-cent-scam-what-do-i-do-with-the-penny/1020401/5 "2025-07-02T14:48:41Z")
Can you post some of the text body of the email? (redacting any sensitive details) ---
**Author:** ![Briny\_Deep](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/briny_deep/32/17188_2.png) [@Briny\_Deep](https://boards.straightdope.com/u/Briny_Deep)\ **Post date:** [July 2, 2025, 2:57pm UTC](https://boards.straightdope.com/t/paypal-one-cent-scam-what-do-i-do-with-the-penny/1020401/6 "2025-07-02T14:57:38Z")
> [@Marvin\_the\_Martian](#): > > I can’t address the “scammy” tone of the email. It’s a private individual I’ve never heard of; they referred to a $500.00 payment I made, which I didn’t; and included a phone number which is not a PayPal phone number. They didn’t specifically ask me to do anything, though. PayPal itself helpfully provides a “Refund” button right next to the transaction; I assume the scammer would like me to click it. That option is obviously incorrect. ETA: > [@Mangetout](#): > > Can you post some of the text body of the email? (redacting any sensitive details) If I didn’t make it clear before, the email is legitimately from PayPal itself; they’re correctly notifying me of a real transaction. It’s the purpose of the transaction that’s the problem. Email from PayPal, which is identical to the language that appears next to the transaction in my account: > [redacted] sent you $0.01 USD > > Amount > $0.01 USD > > Note from [redacted] > > Thanks. . Your payment of $499. 99 has been successfully received, and the change has been applied. If this transaction was not made by you, kindly get in touch with PayPal Billing Team [phone redacted] > > Transaction date > July 1, 2025 > > Transaction ID > [redacted] ---
**Author:** ![pjd](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/pjd/32/3009_2.png) [@pjd](https://boards.straightdope.com/u/pjd)\ **Post date:** [July 2, 2025, 3:03pm UTC](https://boards.straightdope.com/t/paypal-one-cent-scam-what-do-i-do-with-the-penny/1020401/7 "2025-07-02T15:03:06Z")
I assume you’ve googled the phone number ? ---
**Author:** ![Mangetout](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/mangetout/32/19_2.png) [@Mangetout](https://boards.straightdope.com/u/Mangetout)\ **Post date:** [July 2, 2025, 3:03pm UTC](https://boards.straightdope.com/t/paypal-one-cent-scam-what-do-i-do-with-the-penny/1020401/8 "2025-07-02T15:03:46Z")
> [@Briny\_Deep](#): > > our payment of $499. 99 has been successfully received, and the change has been applied. If this transaction was not made by you Right - I would say what this scam is, is: the phone number in the email would connect you to a call centre filled with scammers who will attempt to talk you into allowing them to make a remote connection to your PC, where they will then scam you into sending them a lot of money. If you called that number, as the email suggests, which obviously you should not. ---
**Author:** ![Jackmannii](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/jackmannii/32/311_2.png) [@Jackmannii](https://boards.straightdope.com/u/Jackmannii)\ **Post date:** [July 2, 2025, 3:12pm UTC](https://boards.straightdope.com/t/paypal-one-cent-scam-what-do-i-do-with-the-penny/1020401/9 "2025-07-02T15:12:50Z")
> [@Briny\_Deep](#): > > It’s a private individual I’ve never heard of; they referred to a $500.00 payment I made, which I didn’t; and included a phone number which is not a PayPal phone number. Scam, scam, scam, scam, scam. Lovely scam! ---
**Author:** ![Mangetout](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/mangetout/32/19_2.png) [@Mangetout](https://boards.straightdope.com/u/Mangetout)\ **Post date:** [July 2, 2025, 3:13pm UTC](https://boards.straightdope.com/t/paypal-one-cent-scam-what-do-i-do-with-the-penny/1020401/10 "2025-07-02T15:13:02Z")
In particular, what typically happens with those scams is: - The call centre operative talks the victim into connecting to a remote support screen sharing session from their PC. - They ask the victim to log into their online banking and then they say they need to take control over the session in order to correct the error; they warn the victim that during this time, the screen will go blank. - They take control of the victim’s PC and blank the screen at the victim’s end of the session, then they distract the victim with chit-chat, while they open the ‘inspect code’ function of the browser on the victim’s PC - and using this, they edit the code so that the online banking page appears to show a large incoming transfer. At this point they have not taken any money or changed anything other than the appearance of the displayed web page. - They restore the victim’s view of their own screen, then tell a story about how they made a terrible error and accidentally transferred a large sum of money into the victim’s account (and this appears to be corroborated by the view of the account in the browser, which has been cosmetically edited). - They talk the victim into repaying this money by initiating an outgoing bank transfer. - The victim transfers out the money, but since there was no incoming transaction, this simply depletes their own funds. ---
**Author:** ![pjd](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/pjd/32/3009_2.png) [@pjd](https://boards.straightdope.com/u/pjd)\ **Post date:** [July 2, 2025, 3:15pm UTC](https://boards.straightdope.com/t/paypal-one-cent-scam-what-do-i-do-with-the-penny/1020401/11 "2025-07-02T15:15:39Z")
If they take control after the victim has logged into their online bank, why don’t they just transfer all the money out ? ---
**Author:** ![Briny\_Deep](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/briny_deep/32/17188_2.png) [@Briny\_Deep](https://boards.straightdope.com/u/Briny_Deep)\ **Post date:** [July 2, 2025, 3:16pm UTC](https://boards.straightdope.com/t/paypal-one-cent-scam-what-do-i-do-with-the-penny/1020401/12 "2025-07-02T15:16:22Z")
Very devious! Thank you for all that. Back to the question – what do I do with the penny? Let it sit there forever? Does it eventually just go away? My mom occasionally PayPals me real money, which I assume is not a scam attempt by her. If she does that in the future, my legit account balance will be commingled with that bad penny, which sounds slightly problematic, but maybe it’s NBD and the penny is simply mine to keep and spend freely? ---
**Author:** ![Mangetout](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/mangetout/32/19_2.png) [@Mangetout](https://boards.straightdope.com/u/Mangetout)\ **Post date:** [July 2, 2025, 3:18pm UTC](https://boards.straightdope.com/t/paypal-one-cent-scam-what-do-i-do-with-the-penny/1020401/13 "2025-07-02T15:18:20Z")
Outgoing transfers may require additional authorisation that the scammers don’t have access to - for example to finalise a transfer to a new recipient on my online banking, I have to go through a verification process using an external ‘PINsentry’ device that exchanges codes. So the scammers use this persuasion and misdirection technique to get the account holder to do all of that for them. ---
**Author:** ![Mangetout](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/mangetout/32/19_2.png) [@Mangetout](https://boards.straightdope.com/u/Mangetout)\ **Post date:** [July 2, 2025, 3:19pm UTC](https://boards.straightdope.com/t/paypal-one-cent-scam-what-do-i-do-with-the-penny/1020401/14 "2025-07-02T15:19:36Z")
I don’t think there is any risk in clicking ‘refund’ in your paypal account (not a ‘refund’ link in an email though) ---
**Author:** ![pjd](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/pjd/32/3009_2.png) [@pjd](https://boards.straightdope.com/u/pjd)\ **Post date:** [July 2, 2025, 3:20pm UTC](https://boards.straightdope.com/t/paypal-one-cent-scam-what-do-i-do-with-the-penny/1020401/15 "2025-07-02T15:20:03Z")
Ah yes. Now I remember that is indeed what I have to do (using a card reader). Thanks ---
**Author:** ![RitterSport](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/rittersport/32/6326_2.png) [@RitterSport](https://boards.straightdope.com/u/RitterSport)\ **Post date:** [July 2, 2025, 3:26pm UTC](https://boards.straightdope.com/t/paypal-one-cent-scam-what-do-i-do-with-the-penny/1020401/16 "2025-07-02T15:26:10Z")
This looks like the same scam as this, but they spend a penny to make it seem more legit. The main thing is to put the fake phone number into the text of the PayPal notice so they can send a real message directly from PayPal: > [@How does this PayPal payment request scam work?](https://boards.straightdope.com/t/how-does-this-paypal-payment-request-scam-work/1011126): > > I got two seemingly unrelated emails today notifying me that I have PayPal payment requests. I do have a PayPal account. There is a link in each email to go to PayPal to make payment. The link is for a [paypal.com](http://paypal.com) URL so on the surface the URL seems legit (the payment request itself is definitely not legit). It prompts me to login, but it does this even if I am already logged in on another tab, which I would not expect. But I’m not going to login to that page just to see what happens in case it’s… ---
**Author:** ![Joey\_P](https://avatars.discourse-cdn.com/v4/letter/j/919ad9/32.png) [@Joey\_P](https://boards.straightdope.com/u/Joey_P)\ **Post date:** [July 2, 2025, 3:32pm UTC](https://boards.straightdope.com/t/paypal-one-cent-scam-what-do-i-do-with-the-penny/1020401/17 "2025-07-02T15:32:12Z")
> [@Mangetout](#): > > In particular, what typically happens with those scams is: [Here’s](https://youtu.be/VrKW58MS12g?t=415) a really good video explaining how that works and how incredibly deceptive it is. ---
**Author:** ![Briny\_Deep](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/briny_deep/32/17188_2.png) [@Briny\_Deep](https://boards.straightdope.com/u/Briny_Deep)\ **Post date:** [July 2, 2025, 4:58pm UTC](https://boards.straightdope.com/t/paypal-one-cent-scam-what-do-i-do-with-the-penny/1020401/18 "2025-07-02T16:58:03Z")
I’ve had bogus payment requests more than once, but they never worried me because they didn’t change the balance of my PayPal cash account. ---
**Author:** ![RitterSport](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/rittersport/32/6326_2.png) [@RitterSport](https://boards.straightdope.com/u/RitterSport)\ **Post date:** [July 2, 2025, 4:59pm UTC](https://boards.straightdope.com/t/paypal-one-cent-scam-what-do-i-do-with-the-penny/1020401/19 "2025-07-02T16:59:54Z")
Yeah, this is a new twist for sure. I think you retire 4 seconds earlier than you otherwise would have and use the extra penny towards that. ---
**Author:** ![TokyoBayer](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/tokyobayer/32/13989_2.png) [@TokyoBayer](https://boards.straightdope.com/u/TokyoBayer)\ **Post date:** [July 5, 2025, 1:10am UTC](https://boards.straightdope.com/t/paypal-one-cent-scam-what-do-i-do-with-the-penny/1020401/20 "2025-07-05T01:10:14Z")
> [@Mangetout](#): > > They restore the victim’s view of their own screen, then tell a story about how they made a terrible error and accidentally transferred a large sum of money into the victim’s account (and this appears to be corroborated by the view of the account in the browser, which has been cosmetically edited). I’ve watched a few of those scam baiters YouTubers (Kitboga?) And they have a victim type in the amount, to which they add a couple extra zeros. The rest is exactly as you described. [Next page](https://boards.straightdope.com/t/paypal-one-cent-scam-what-do-i-do-with-the-penny/1020401.md?page=2)