PayPal's 'account country' mechanic — nothing like streaming
A PayPal account is pinned to a country/region code at signup (Account Country Code). That value determines which currencies you can receive, which local payment rails work, whether you can apply for PayPal Credit, and whether you can link a local bank card. Once registered, this field cannot be changed via self-service — you must contact support with proof of address + bank account + passport in the new country, which typically means closing the old account and opening a new one, with a 60-day hold on residual balances and subscriptions. So VPN'ing from the US to HK does NOT convert a US account into a HK one — you still see the registration country's feature set.
Sanctions and hard blocks — blocked at signup
PayPal complies with US OFAC sanctions. The following are blocked at signup and existing accounts are frozen: Cuba (CU), Iran (IR), North Korea (KP), Syria (SY). Russia (RU) withdrew entirely in March 2022. Occupied Ukrainian territories (Crimea / Donetsk DNR / Luhansk LNR) are separately blacklisted. VPN doesn't help — PayPal cross-checks ID nationality, card BIN, and phone MCC; any one of them pointing to a sanctioned region triggers refusal. If an existing account logs in from a sanctioned region via VPN, the account enters Limited state and requires document upload to lift — unfreeze success rate is typically < 20%.
KYC + 2FA + login risk — why VPN use often locks you out
PayPal's risk engine (internally Fraud Net) tracks three signal classes simultaneously: (1) device fingerprint — browser UA, canvas, fonts, timezone; (2) network path — IP type, ASN, RTT to PayPal edge; (3) behavior — login time, typing speed, preferred currencies. Datacenter IP + sudden device-fingerprint change + registration country ≠ IP country stacked together triggers Step-Up auth (SMS, email OTP, even face verification). AF3 rates PayPal at 3★ — residential IP on the same device usually passes, but frequent country hops almost always lock. For 2FA prefer a hardware U2F key (YubiKey) over SMS: SMS drops when you change numbers, and PayPal's risk model adds +5 trust to U2F-enrolled devices.
Feature matrix — what's actually country-gated
PayPal features are country-tiered, not VPN-unlockable: (1) PayPal Credit — US / UK only, installment financing, SSN / NI Number required at signup; (2) Cashback Mastercard — US only, needs SSN + US address, 1.5-3% cashback; (3) Venmo — US-only subsidiary, all transfers US-to-US, accepts US mobile numbers only; (4) Xoom — international remittance reaching 160+ countries, but sending is restricted to US/CA/UK/EU etc., fees vary by corridor ($50 US→Philippines ≈ $0, $50 US→China ≈ $5); (5) personal P2P — same-country only by default, cross-border personal transfer needs Xoom; (6) Business-account invoicing / subscriptions / API are globally consistent, but require KYC level-up.
FX fee traps — the real hidden cost
Cross-currency transactions don't settle at mid-market: PayPal adds 3-4% on top of the interbank rate (varies by country). Example: a US account receiving EUR and converting to USD sees a rate ~3.5% off the day's ECB mid — much worse than Wise/Revolut and worse than card networks (Visa/MC is typically 0-1%). Mitigations: (1) hold the source currency in PayPal's multi-currency balance instead of auto-converting; (2) use bank wires or Wise for large cross-currency transfers; (3) pay same-currency merchants from PayPal Balance directly. Another trap is Chargebacks — PayPal's buyer protection is strong, sellers lose disputes ~15% of the time, and VPN'd seller accounts are especially risky because PayPal flags IP volatility as a seller credit-risk indicator, sometimes freezing balance for 21 days.
Recommended login strategy — keep the country stable
AF3's recommended practice for PayPal: (1) stick to residential VPN nodes in a single country long-term (ideally your account's registered country); (2) do NOT temporarily swap IPs just to view another country's PayPal marketing site — PayPal logs lat/long of every login and flags accounts that cross 3+ continents in a year; (3) when physically moving to a new country, submit the official migration first, switch IP after — doing it the other way round freezes the account; (4) mobile-app login has lower risk than web — the PayPal app's device-ID signature is more stable; (5) for business accounts, prefer a fixed office IP + API Key instead of roaming VPN — Seller Protection coverage drops when the login IP wanders.