Domain Intelligence
Last Updated:

Paypal.com

Safe to Send

Paypal.com is operated by PayPal Holdings Inc.. The domain runs 2 mail exchanges and SMTP is responsive, with all three authentication standards in force.

Safe to Send
Verify Mailbox

Verify @paypal.com emails

Live SMTP handshake against paypal.com mail servers. No email is sent. 10 free per day, no signup.

@paypal.com
No email sent No signup Real-time SMTP

Trusted by 400,000+ senders

4.9/5
From 8,500+ verified reviews
Switched after a billing dispute with NeverBounce. Same SMTP results on a 5k test sample. The MX, SPF, DKIM lookup tools are a hidden value-add for debugging client deliverability complaints. James Wexler · Growth Engineer
SOC 2 Type II GDPR CCPA 99.7% Accuracy
Disposable
No
Persistent addresses, not throwaway
SMTP Live
Yes
Mail server responds to SMTP handshake
MX Records
2
Mail exchangers

Mail Exchange (MX) Records for paypal.com Mail Exchange records. They tell other mail servers which hosts are responsible for receiving email at this domain, in priority order. Lower priority numbers are tried first.

2 RECORDS
#10
mx2.paypalcorp.com 173.224.161.141
Reachable
#10
mx1.paypalcorp.com 173.224.165.17
Reachable
SMTP Handshake Simple Mail Transfer Protocol. We open a live SMTP connection to the primary MX and read the greeting banner. A response confirms the mail server is alive and accepting connections. Responsive
BANNER220 mx2.paypalcorp.com ESMTP
Primary mail server accepted SMTP connection and returned a banner during the live audit.

paypal.com Email Authentication SPF · DKIM · DMARC

3/3 PASS
SPF Sender Policy Framework. A DNS record listing which servers are allowed to send mail for this domain. Receivers reject or flag mail from unauthorized servers. Pass
TXTv=spf1 include:pp._spf.paypal.com include:3ph1._spf.paypal.com include:3ph2._spf.paypal.com include:3ph3._spf.paypal.com include:3ph4._spf.paypal.com include:sendgrid.net include:aspmx.pardot.com ~all
Authorized senders are defined and pass SPF policy.
DKIM DomainKeys Identified Mail. The sending server cryptographically signs outbound mail with a private key, and receivers verify the signature using a public key in DNS. Pass
SELECTORDetected via standard selectors
A DKIM signature was detected. Outbound mail from this domain can be cryptographically verified.
DMARC Domain-based Message Authentication, Reporting & Conformance. Tells receivers what to do when SPF or DKIM checks fail: none, quarantine, or reject. Reject
TXTv=DMARC1; p=reject; rua=mailto:d@rua.agari.com; ruf=mailto:d@ruf.agari.com
Strict policy. Receivers are instructed to reject any mail that fails SPF or DKIM. The strongest available setting.

paypal.com Domain Registration WHOIS · Nameservers · Registrar

26 YEARS OLD
RegistrarMarkMonitor, Inc.
IANA ID292
RegisteredJuly 15, 1999
Last UpdatedMarch 6, 2026
ExpiresJuly 14, 2026
Age26 years
TLD.com
Authoritative Nameservers (4)
  • ns1-pchnet.paypal.com
  • pdns100.ultradns.com
  • ns2-pchnet.paypal.com
  • pdns100.ultradns.net
Registrant
PayPal Inc.
UNITED STATES
Technical Contact
Hidden by registrar privacy service
About this Domain

About paypal.com

PayPal Holdings Inc. (paypal.com) is a global financial technology company headquartered in San Jose, California. PayPal operates the world's most widely used online payment platform, processing billions of transactions annually for over 430 million active accounts. The company also owns Venmo, Braintree, and Xoom, providing a comprehensive suite of digital payment services.

PayPal implements the highest level of email authentication on the paypal.com domain with SPF, DKIM, and DMARC reject enforcement. PayPal is consistently one of the most impersonated brands in phishing attacks globally, with fraudulent emails disguised as payment receipts, account limitations, and security alerts. Maximum-strength domain authentication is critical to the company's anti-fraud strategy.

Email verification against paypal.com returns definitive accept/reject responses for individual mailboxes. The domain does not operate as catch-all. PayPal's mail infrastructure implements strict rate limiting and advanced security measures on inbound SMTP connections, reflecting the financial industry's heightened security requirements.

Delivering to paypal.com requires impeccable sender authentication. As a financial services company, PayPal maintains some of the strictest email filtering policies in any industry. Your sending domain must have flawless SPF, DKIM, and DMARC configuration, and your sender reputation must be excellent for consistent inbox delivery to paypal.com addresses.

Other Domains Similar to paypal.com

Other corporate email domains we've audited. Click any one to see its MX records, authentication, and risk score.

More Email Verification Tools

Free single-address checks, bulk uploads, and APIs for plugging email verification into your own product.

Common Questions About paypal.com

Is paypal.com a disposable or temporary email provider?
No. paypal.com is not a disposable email provider. It is classified as Corporate Email operated by PayPal Holdings Inc. and addresses on paypal.com are persistent rather than throwaway. Mail sent to a valid paypal.com mailbox reaches a real recipient.
How do I verify if a paypal.com email address is valid?
The fastest way to verify a paypal.com email address is to use our free email checker. Enter any @paypal.com mailbox at the top of this page and our system performs a real-time SMTP handshake against paypal.com's mail servers, confirming whether the mailbox exists, is reachable, and is safe to send to. No email is ever delivered during the check.
Can I check if a paypal.com email exists without sending a message?
Yes. Our real-time email verification API connects directly to paypal.com's mail server, opens an SMTP session, and queries the mailbox using the RCPT TO command without ever transmitting an actual email. The server's response confirms whether the paypal.com mailbox is valid, full, or non-existent. The recipient never receives anything and never sees the check.
What are the MX records for paypal.com?
paypal.com currently publishes 2 mail exchange (MX) records. The primary MX is mx2.paypalcorp.com, which is the first server contacted when other mail systems try to deliver email to a paypal.com address. The full list with priorities and IP addresses is in the MX Records panel above. MX records tell sending servers where to route email for paypal.com.
Does paypal.com use SPF, DKIM, and DMARC email authentication?
paypal.com enforces all three email authentication standards: SPF, DKIM, and DMARC (policy: reject). This is the gold-standard configuration. It means receivers can verify that mail claiming to come from @paypal.com is genuine, and paypal.com's DMARC policy of 'reject' instructs receivers how to handle messages that fail those checks.
Why do emails to paypal.com bounce or get blocked?
Bounces from paypal.com usually fall into three buckets: the mailbox doesn't exist (5xx user unknown), the inbox is full, or your sending domain isn't authenticated to paypal.com's satisfaction. The fastest fix is to run each address through a free email verifier before you send, and to make sure your own SPF, DKIM, and DMARC are configured correctly so paypal.com's receivers trust you.
How can I verify a large list of paypal.com email addresses?
Our bulk email verifier accepts CSV or TXT uploads with thousands or millions of paypal.com addresses (or any mix of domains). Every address goes through 30+ checks including SMTP existence, paypal.com catch-all detection, role-account detection, and disposable-domain matching. Results typically come back within minutes and previously-failed addresses on your blacklist are reprocessed for free. For continuous high-volume needs, see our unlimited email verification API.
Is it safe to accept signups from paypal.com email addresses?
Yes, with normal hygiene. paypal.com is a legitimate email service and signups from @paypal.com behave like any other real user. Pipe each address through a real-time email verifier API at the moment of signup to catch typos and dead mailboxes, but there is no need to block paypal.com by default.
What email format does paypal.com use for usernames?
Most paypal.com mailboxes follow common patterns like first.last@paypal.com, firstinitiallast@paypal.com, or first@paypal.com, but the actual local-part rules depend on PayPal Holdings Inc.. The only reliable way to confirm whether a specific @paypal.com address exists is to run it through a free email verification tool. Guessing patterns will produce a high bounce rate and damage your sender reputation.
How is the paypal.com risk score calculated?
The 0-to-100 risk score for paypal.com combines disposable-domain classification, mail-server reachability, MX record presence and depth, SPF / DKIM / DMARC enforcement, DMARC policy strength, SMTP banner response, and domain age. Lower scores mean safer to send to. Disposable domains are pinned at the high end of the scale. The paypal.com score is recomputed on every audit so it always reflects the live state of the domain.
Is paypal.com a valid email domain?
Yes, paypal.com is the official corporate email domain for PayPal Holdings Inc.. It is used for business communications and is not available for public registration.
Is paypal.com a disposable or temporary email provider?
No, paypal.com is a corporate email domain belonging to PayPal Holdings Inc., used exclusively by employees and authorized personnel.
What mail server does paypal.com use?
paypal.com uses enterprise-grade mail infrastructure. Check the MX records section above for specific mail server details.
Can I send marketing emails to paypal.com addresses?
B2B marketing to paypal.com addresses requires proper consent and compliance with anti-spam laws. Corporate domains may use catch-all configurations, so verify addresses before sending.
How do I verify an email address at paypal.com?
Corporate domains like paypal.com may use catch-all configurations. Use BulkEmailChecker advanced verification to detect catch-all behavior and validate individual addresses.