Afterpay scams: fake payment reminders and checkout traps
Key Takeaways
- Afterpay's security guidance says its customer service will never ask you for your password, verification code, or personal or financial details.
- Fake reminders claim a payment failed or your account is restricted, then send you to a copy of the Afterpay login page.
- Skip the link. Open the Afterpay app yourself to see whether a payment is really due.
- If you entered details on a fake page, tell Afterpay right away, change your password, and call your bank.
- Report fake Afterpay emails to Afterpay's security team, forward scam texts to 7726 (SPAM), and report the scam at ReportFraud.ftc.gov.
What is an Afterpay scam?
An Afterpay scam is a fake message, website, or checkout that uses the Afterpay name to get your login, your verification codes, your card details, or your money. It's one part of a wider pattern we cover in our guide to buy now, pay later scams.
Many of these scams arrive by text or email. People reported $470 million in losses to scams that started with a text in 2024, more than five times the 2020 figure, according to the FTC. Fake fraud alerts and fake package delivery problems were among the most reported.
The fake Afterpay messages to watch for
Fake payment reminders and declined payment notices
These say a payment failed, your account is restricted, or an installment is overdue. In one example documented by the email security firm MailGuard in December 2022, an email titled "Your last Afterpay payment was declined" claimed a $25.11 payment had failed and offered a "Retry payment" button.
The button led to a close copy of the Afterpay login page. It asked for the reader's email and password, then a one-time code, then their card number, expiration date, and security code, and finally a second one-time code. That last code was likely used to approve a payment on the scammer's side. The sender name said Afterpay, but the email address behind it didn't belong to Afterpay. For more red flags, see how to spot a fake text message.
Fake checkout pages
Some scams start with a shop. A fake store advertises a deal on social media and shows Afterpay at checkout to look trustworthy. Any store can put a payment logo on its page, so the logo alone doesn't prove the shop is real. Others send you to a lookalike Afterpay sign-in page partway through "checkout." Before you sign in, read the web address letter by letter, and check our guide to detecting fake shopping sites.
Verification code requests
Afterpay can send verification codes by text or email. Scammers try to get them by text, email, or a call that claims to be from Afterpay support. Afterpay's guidance is clear: don't share your verification code with anyone, and its customer service will never ask for it. If you get a code by text or email that you didn't trigger, Afterpay says you can safely ignore it.
How to check an Afterpay message is real
- Don't tap the link or reply.
- Check the sender. Afterpay's guidance says its emails come from afterpay.com. On a computer, hover over a link to see where it really goes. If it doesn't match afterpay.com, it could be fake.
- Open the Afterpay app yourself. Use the app on your home screen, not anything in the message, and look at your payments.
- Still unsure? Contact Afterpay directly. The FTC advises contacting the company using a phone number or website you know is real, not the information in the message.
How to check a link with Guardio in ChatGPT
If you want a second opinion on a link before you open it, you can use Guardio's app in ChatGPT, called "Check links and data leaks."
- Copy the link without opening it. On a phone, press and hold the link, then choose Copy.
- Ask Guardio to check it. In ChatGPT, ask Guardio to check the link and paste it in.
- Read the result, then open Afterpay yourself.
A result reflects known threats at the time of the check, so it isn't a guarantee. For more ways to test a link, see how to check if a link is safe.
What to do if you already entered your details
- Tell Afterpay as soon as you can. Afterpay's guidance asks you to include as much detail as possible, such as a screenshot of the message you received. In the US, you can chat with Afterpay in the app or call the number on its help center.
- Change your passwords. Change your Afterpay password first, then any account that used the same one. Use a different, long password for each account, and turn on multi-factor authentication wherever it's offered.
- Call your bank or card provider. If you entered card details, tell them right away and ask about blocking the card and stopping any charges you don't recognize.
- Protect your identity. If you think a scammer has your Social Security, credit card, or bank account number, go to IdentityTheft.gov for steps based on what was exposed.
- Report the scam. Report a phishing email to Afterpay's security team by attaching it as an .eml file, using the address on Afterpay's help page. Forward scam texts to 7726 (SPAM) and report the scam at ReportFraud.ftc.gov.
Clicked but didn't enter anything? See what to do after clicking a phishing link.
How to protect yourself from Afterpay scams
- Check payments and reminders in the Afterpay app, never through a link.
- Never share a verification code, even with someone who says they're Afterpay.
- Keep the Afterpay app updated and set your phone to update automatically.
- Use a different, long password for Afterpay than for your email or social media.
- Before you buy from a new store, research it and read independent reviews.
- Pick safer payment methods when a shop is new to you.
How Guardio helps
Guardio helps flag scam links and phishing pages with its browser extension for Chrome and Edge and its apps for iOS and Android. Email Security flags phishing emails that get past the Gmail spam filter. Guardio can't stop someone from typing details into a page or reading out a code, so opening the Afterpay app yourself is still the check that matters most.
The bottom line
Afterpay scams work by making a small payment problem feel urgent. The fix is the same every time: skip the link, open the Afterpay app yourself, and never share a verification code. If you've entered details, tell Afterpay and your bank quickly.
Take the free scam quiz and get a free security scan
Sources
- Afterpay (Australia), Staying safe from scams and fraud. No publication date shown. Accessed October 23, 2026.
- Afterpay US help center, I think I have been sent a phishing email, what do I do? No publication date shown. Accessed October 23, 2026.
- MailGuard, Afterpay customers warned their account is restricted in phishing scam. Published December 8, 2022.
- Federal Trade Commission, Top text scams of 2024, Data Spotlight. Published April 14, 2025.
- Federal Trade Commission, How to recognize and avoid phishing scams, Consumer Advice. September 2022.
FAQs
Does Afterpay text me to ask for a verification code?
Afterpay may send you a code to confirm it's you, but its guidance says customer service will never ask you to share it. If you get a code you didn't trigger, you can ignore it. Never read a code out to anyone.
How do I know if an Afterpay email is real?
Check that it comes from afterpay.com and that its links go to afterpay.com. The safest check is to skip the email and open the Afterpay app yourself to see your payments.
How do I report a fake Afterpay email?
Attach the email as an .eml file and send it to the security team address listed on Afterpay's help page about phishing emails. You can also report it to the FTC at ReportFraud.ftc.gov.
What should I do if I entered my Afterpay login on a fake page?
Tell Afterpay as soon as you can, with a screenshot if you have one. Change your Afterpay password and any account that shares it, then check your payments for anything you didn't make.
Can a fake store use the Afterpay name?
Yes. A fake shop can show the Afterpay logo at checkout to look trustworthy. Research the store and read independent reviews before you buy, and check the web address before you sign in.
Is a payment reminder always a scam?
No. A real payment can be due, so don't ignore it. Just don't act on it through a link. Open the Afterpay app and check your payments there.
