Paypal Hacked

[Perik Omo]

Bloomin' PayPal account has been hacked. I set up the account last year to pay for something but never used it and unfortunately it had an active debit card on it.

Opened my email today and find a load of emails from paypal about purchases made yesterday totalling over €1500, all at one retailer. I've notified them by their notification pages and removed my debit card from the account but that only takes effect for purchases from today onwards, not those made yesterday. The retailer is one of those really awkward internet outfits where it's impossible to contact them without an active order number, I've only got the paypal transaction number which is no good as they want their order number which I obviously don't have as I didn't make the order!! So, I can't let them know that the high value orders are fraudulent.

I've also been to the bank and they have cancelled my debit card but say they can't do anything about stopping the payments until the requests for payment hit the account.

Anything else I should be doing?

[Ste1987]

When I got hit a few years ago I just reported it to Paypal as an unauthorised transaction, is that still possible?

EDIT: Just checked, you can still do this. Just log in, find the transactions, click on them and report them as unauthorised

Edited by Ste1987 on Tuesday 29th November 10:08

[djt100]

Ste1987 said:

When I got hit a few years ago I just reported it to Paypal as an unauthorised transaction, is that still possible?

EDIT: Just checked, you can still do this. Just log in, find the transactions, click on them and report them as unauthorised

Edited by Ste1987 on Tuesday 29th November 10:08

Yep, had this too and had the money back within a couple of days. Paypal are reasonably good for this.

[Perik Omo]

OK, I've done that for each transaction and they say that they will get back to me within 10 days.

[Sump]

You'll get your money back, it's no problem.

[red_slr]

I never use my debit card online I know it's late now but I have a credit card that only gets used for PayPal.

[TonyRPH]

Set up two factor authentication.

Then every transaction will need a unique code which they will send to you via a text message.

That will effectively prevent any hacking.

[Speed addicted]

TonyRPH said:

Set up two factor authentication.

Then every transaction will need a unique code which they will send to you via a text message.

That will effectively prevent any hacking.

This is great unless you work somewhere you can't get a phone signal for half the year. I set up a previous bank account with it then couldn't do any internet banking transactions while offshore!

Obviously I understand that 99% of the population will be just fine, but it's very annoying when it happens.

[_rubinho_]

Speed addicted said:

TonyRPH said:

Set up two factor authentication.

Then every transaction will need a unique code which they will send to you via a text message.

That will effectively prevent any hacking.

This is great unless you work somewhere you can't get a phone signal for half the year. I set up a previous bank account with it then couldn't do any internet banking transactions while offshore!

Obviously I understand that 99% of the population will be just fine, but it's very annoying when it happens.

There's an app too that generates a random number in a similar way to some bank login or VPN keys. Look up Symantec VIP Access. eBay use it too.

[sjg]

Perik Omo said:

Anything else I should be doing?

If you use the same username/password combination anywhere else, change them immediately.

[Perik Omo]

TonyRPH said:

Set up two factor authentication.

Then every transaction will need a unique code which they will send to you via a text message.

That will effectively prevent any hacking.

That's a bit strange. If I ever use that card to buy on line then I always have to use two factor type authorisation where they telephone me and give me the authentication number to input before the payment goes through. In this case that never happened.

[Perik Omo]

sjg said:

If you use the same username/password combination anywhere else, change them immediately.

Yes, I've gradually been organizing changing my passwords as I'm now using 1Password to secure them.

It's hard to know how they got hold of the Paypal details as I haven't used it since creating the account last year and I haven't responded to "phishing" type emails that purport to come from Paypal.

[soad]

I tend to delete (card) payment details once payment is made.