INDEX / DIRECTORY / PAYPAL / V-DIG

Paypal V-DIG

DIGITAL INFRASTRUCTURE AUDIT UPDATED 2026-05-18
V-DIG Score 6.00 /10 C Paypal — BDS-1000 520
V-DIG 6.00

Evidence-only forensic audit. Scoring happens downstream — see the main dossier for the composite assessment.

V-DIG Audit — PayPal Holdings, Inc.

Target: PayPal Holdings, Inc. (NASDAQ: PYPL) Audit Phase: V-DIG (Digital Forensics / Technographic) Prepared: May 2026 Scope: Technology relationships, R&D footprint, strategic investments, civil society scrutiny, and related digital forensic indicators with emphasis on Israeli-origin technology, state relationships, and occupied-territory nexus.

Methodology & Limitations

This audit is based exclusively on the evidence compiled in the accompanying research memo, which synthesises corporate disclosures (SEC filings, PayPal Newsroom), M&A records, PayPal Ventures announcements, and major-press reporting through early 2026. Where the memo identifies evidence gaps, this audit records them as open items rather than inferring facts. No new research was conducted beyond the memo’s source inventory. All factual claims are footnoted to sources identified in the memo.

Enterprise Technology Stack & Vendor Relationships

1.1 Israeli-Origin Cybersecurity & Analytics Vendors

No public evidence has been identified confirming that PayPal procures services from Israeli-origin cybersecurity, endpoint-detection, SIEM, or analytics vendors — including Check Point, Wiz, SentinelOne, CyberArk, NICE, Verint, or Claroty — as enterprise suppliers.1 PayPal’s annual 10-K cybersecurity disclosures describe internal controls in generic terms without naming technology vendors, which is standard practice for large-cap financial institutions and does not constitute evidence of absence.1

Similarly, no public PayPal case study, press release, or third-party reference has been identified confirming a customer relationship with Palo Alto Networks (an Israeli-founded company), though this status is characterised as unknown rather than confirmed negative.1

1.2 Procurement & Systems Integrators

No public evidence has been identified naming a specific systems integrator (e.g., Accenture, Infosys, TCS) that has deployed Israeli-origin technology into PayPal’s enterprise stack. Source classes reviewed include SEC filings, integrator case-study pages, and trade press.1

1.3 Evidence Gap

PayPal does not publicly enumerate its cyber or cloud vendor relationships. Meaningful characterisation of Israeli-origin software dependency would require job-posting scraping for named tooling, vendor case-study mining, and technographic tools (BuiltWith, Wappalyzer) — none of which are available within the public-disclosure record reviewed here.2

Surveillance, Biometrics & Retail Technology

No public evidence has been identified of PayPal deploying facial-recognition, biometric, or computer-vision technology from Israeli-origin vendors such as Trigo, BriefCam, AnyVision/Oosto, or Trax.1 This finding is consistent with PayPal’s business model: it is a digital payments platform, not a brick-and-mortar retailer, and frictionless-checkout computer-vision use cases fall outside its disclosed product surface.1

No public evidence has been identified of PayPal using Israeli-origin predictive analytics, social-media monitoring, or workforce-surveillance technology, whether through direct procurement or third-party intermediaries.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

3.1 Physical Data Centres in Israel

PayPal operates an R&D and engineering presence in the Tel Aviv area, originating from the 2008 acquisition of Fraud Sciences.34 However, no public evidence has been identified that PayPal operates customer-facing production data centres physically inside Israel. PayPal’s payments-processing infrastructure is regionalised via a global data-centre footprint disclosed at a high level in annual filings.1

3.2 Project Nimbus

PayPal is not a participant in Project Nimbus, the Israeli government’s cloud infrastructure tender. That contract is publicly held by Google Cloud and Amazon Web Services.5 No public evidence has been identified of PayPal holding Israeli government cloud or sovereign-cloud contracts of any description.

3.3 Sovereignty & Resilience Services

No public evidence has been identified of PayPal providing sovereignty, resilience, or managed infrastructure services to any Israeli state or military body. PayPal is a payments platform and has no disclosed cloud-infrastructure vendor line of business.1

Defence, Intelligence & Security Sector Technology Relationships

4.1 Contracts with Israeli MoD / IDF / Intelligence Services

No public evidence has been identified in SEC filings, PayPal press releases, or the NGO corporate-accountability databases (Who Profits Research Center; AFSC Investigate) of PayPal holding contracts with the Israeli Ministry of Defence, the Israel Defense Forces, or Israeli intelligence services.167 Re-verification of both NGO databases is recommended as a due-diligence step, given indexing lags.

4.2 Dual-Use Deployment

No public evidence has been identified of PayPal’s payments, fraud-management, or data services being deployed by Israeli security or intelligence bodies in a dual-use capacity.167

4.3 Offensive Cyber

PayPal has no disclosed offensive-cyber, zero-day research, or digital-weapons product line. No public evidence has been identified connecting PayPal to the offensive-cyber supply chain.1

4.4 Contextual Note — Service Availability in Palestinian Territories

A distinct and recurring theme in the NGO literature — documented by 7amleh (The Arab Center for the Advancement of Social Media), referenced by Human Rights Watch, and raised in a U.S. Congressional letter in April 2021 — concerns PayPal’s service-availability asymmetry: it offers accounts and payment services to Israeli settlers operating in the West Bank while denying equivalent access to Palestinian residents of the West Bank and Gaza.67 This is a service-access issue, not a technology-supply or defence-contract relationship, and is treated here as context rather than as a positive V-DIG indicator. Primary sources for this controversy are flagged as an evidence gap requiring fresh URL retrieval.

AI, Algorithmic & Autonomous Systems

No public evidence has been identified of PayPal providing AI or machine-learning capabilities to any Israeli state or military body.167 No public evidence has been identified of PayPal training models on data sourced from Israeli or occupied-territory civilian populations or surveillance feeds. PayPal discloses no product line in autonomous targeting, tracking, or surveillance systems.1

Technology Ecosystem & R&D Footprint

6.1 Israeli R&D Centre

PayPal operates an ongoing R&D and engineering hub in Israel, concentrated in the Tel Aviv area.4 The site’s origins trace to PayPal’s January 2008 acquisition of Fraud Sciences, an Israeli risk-management and fraud-analytics company purchased for approximately $169 million.3 The Fraud Sciences technology became foundational to PayPal’s global transaction-risk engine. Israeli business press has recurrently characterised the Israeli office as a centre for fraud, risk, and crypto/blockchain engineering.84 Active recruitment postings confirm the presence is ongoing as of 2024.4 Current headcount is not publicly disclosed; the Start-Up Nation Central / Israeli Innovation Authority registry is the recommended source for updated figures.2

6.2 Tel Aviv Startup Incubator

In 2014, PayPal launched a startup incubator in Tel Aviv, reported in Israeli business press, focused on fintech and security startups.9 Continuation or closure of the incubator beyond 2018 has not been independently confirmed in this audit and is treated as an open evidence gap.

6.3 Acquisitions of Israeli Companies

Fraud Sciences (2008) PayPal — then operating under eBay — announced the acquisition of Fraud Sciences in January 2008 for approximately $169 million.3 The company provided real-time risk-scoring and fraud-detection technology. Post-acquisition, the Tel Aviv team remained in place as PayPal’s Israel R&D hub.4

Curv (2021) PayPal announced the acquisition of Curv on 8 March 2021, with completion reported the same month.1011 Curv was an Israeli-founded digital-asset security firm specialising in multi-party computation (MPC) cryptographic key management for institutional crypto custody. The reported transaction value was approximately $200 million.1213 Curv’s technology was integrated into PayPal’s cryptocurrency product line.10 Whether Curv-derived MPC custody technology continues to underpin PayPal’s crypto products following product-line changes in 2024–2025 (including the PYUSD stablecoin launch on Solana and a reported UK crypto service pause) requires fresh verification and is flagged as an evidence gap.

6.4 Strategic Investments via PayPal Ventures

PayPal Ventures, the company’s corporate venture arm, has made investments in multiple Israeli-founded or Israeli-R&D-anchored companies.14 The following have been identified in the research record:

The current active/exited status of these positions as of 2025–2026 has not been confirmed and is flagged as an evidence gap.14

6.5 Patent & Academic Co-Development

No public evidence has been identified of formal co-development agreements or named IP licensing deals between PayPal and Israeli academic or technology-transfer institutions (Technion, Hebrew University / Yissum, Weizmann Institute / Yeda Research). A USPTO assignee search filtering for “PayPal” with Israeli inventor addresses was not conducted in this audit and is flagged as a recommended supplementary step.

Civil Society Scrutiny & Regulatory History

7.1 NGO Reporting — Technology Supply to Israeli State Bodies

The leading recurring NGO theme referencing PayPal in the Israel context is the Palestinian-access service gap, not any technology-supply relationship to Israeli state or military bodies. 7amleh, Human Rights Watch, and a 2021 U.S. Congressional letter (led by Rep. Mark Pocan) have documented the disparity between PayPal’s service availability to Israeli settlers in the West Bank and its denial of equivalent services to Palestinian residents of the West Bank and Gaza.67 This is a service-access and potential discrimination concern; it is not evidence of a V-DIG-relevant technology-supply relationship.

7.2 Who Profits & AFSC Investigate Listings

A review of the Who Profits Research Center and AFSC Investigate corporate-accountability databases found no entry flagging PayPal as a supplier of technology to Israeli security forces or settlement infrastructure.67 Re-verification of both databases is recommended, given indexing lags and potential for new entries.

7.3 Organised Boycott & Divestment Campaigns

No public evidence has been identified of organised boycott or divestment campaigns specifically targeting PayPal’s technology provision to Israeli state bodies. Campaigns referencing PayPal have centred on the Palestinian-access service issue rather than tech-sales relationships.17

7.4 Regulatory & Export-Control Actions

No public evidence has been identified of regulatory, legal, or export-control actions connected to Israel-related technology sales by PayPal.1

7.5 General Regulatory Context (Non-Israel-Specific)

For completeness: PayPal has been subject to unrelated regulatory matters including CFPB consent orders and OFAC AML/sanctions settlements (2015 and 2022).1 These are not within V-DIG scope but are noted because OFAC enforcement actions are sometimes conflated with Israel-related sanctions discussion in third-party reporting.

8. Open Evidence Gaps

The following items were identified in the research memo as requiring further verification before the findings in this audit can be treated as definitive:

End Notes

Footnotes

  1. https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany&CIK=0001633917 ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9 ↩10 ↩11 ↩12 ↩13 ↩14 ↩15

  2. https://finder.startupnationcentral.org/mnc_page/paypal ↩ ↩2 ↩3 ↩4

  3. https://newsroom.paypal-corp.com/2008-01-24-eBay-to-Acquire-Fraud-Sciences ↩ ↩2 ↩3

  4. https://www.paypal.com/il/webapps/mpp/jobs ↩ ↩2 ↩3 ↩4 ↩5

  5. https://www.theguardian.com/technology/2021/may/12/google-amazon-project-nimbus-israel ↩

  6. https://www.whoprofits.org/companies/all ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7

  7. https://investigate.afsc.org/company/paypal-holdings ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7

  8. https://www.calcalistech.com/ctech/articles/0,7340,L-3897433,00.html ↩

  9. https://www.globes.co.il/en/article-paypal-to-open-startup-incubator-in-israel-1000958236 ↩

  10. https://newsroom.paypal-corp.com/2021-03-08-PayPal-Completes-Acquisition-of-Curv ↩ ↩2 ↩3

  11. https://newsroom.paypal-corp.com/2021-03-08-PayPal-to-Acquire-Curv ↩ ↩2

  12. https://www.reuters.com/article/us-paypal-curv-idUSKBN2B01QS ↩

  13. https://techcrunch.com/2021/03/08/paypal-confirms-curv-acquisition/ ↩

  14. https://www.paypal.com/us/ventures ↩ ↩2 ↩3 ↩4 ↩5 ↩6

  15. https://meliopayments.com/news/ ↩

  16. https://tipalti.com/news/ ↩

  17. https://bdsmovement.net/campaigns ↩