Paypal

For everything that's not in any way related to PureBasic. General chat etc...
User avatar
netmaestro
PureBasic Bullfrog
PureBasic Bullfrog
Posts: 8425
Joined: Wed Jul 06, 2005 5:42 am
Location: Fort Nelson, BC, Canada

Paypal

Post by netmaestro »

I got an email today from paypal, a receipt for a payment of 999 euros to someone I've never heard of. There's not that much money in my account but Paypal is making a withdrawal from my bank. I've opened an investigation on Paypal and called the bank with a stop payment for the precise amount in CDN funds, so hopefully this theft won't succeed. But - we're very careful of phishing here and we never follow a link in an email from an unknown source, so we're wondering how this could have happened. Does anyone know of Paypal being hacked recently? We just can't figure any other way this could have happened. All computers here test virus-free.
BERESHEIT
User avatar
W4GNS
User
User
Posts: 31
Joined: Tue Jan 04, 2011 5:51 am
Location: Virginia

Re: Paypal

Post by W4GNS »

Every once in awhile I get bogus emails that look like PayPal but there not, claiming antivirus software and such was just purchased, I ignore them. If it is phishing you should be able to hover your mouse over the links and see what the address really is. May be off by only one or two letters.
User avatar
netmaestro
PureBasic Bullfrog
PureBasic Bullfrog
Posts: 8425
Joined: Wed Jul 06, 2005 5:42 am
Location: Fort Nelson, BC, Canada

Re: Paypal

Post by netmaestro »

Just logged into Paypal and found these 2 graphics, never seen them before:

Image
Image

This is an account I've had for years, which makes the "you're almost done" wording suspicious. And Paypal would know my account setup was complete long ago. Something like this, if they offered it, it would be an option. I think Paypal has been hacked.
BERESHEIT
PB
PureBasic Expert
PureBasic Expert
Posts: 7581
Joined: Fri Apr 25, 2003 5:24 pm

Re: Paypal

Post by PB »

Hi NM,

> a receipt for a payment of 999 euros to someone I've never heard of

As a seasoned PayPal user I can tell you that's just a scam email,
and not from PayPal at all. I see emails like this all the time, and
not just for PayPal, but for my real bank. I wouldn't stress over it.

> Paypal is making a withdrawal from my bank

Doubt it. You said "making", so has it actually happened? I bet not. :)

Just delete the email and don't respond or worry about it. However,
if it does turn out to be true, you can just dispute it with your bank.
Don't even get PayPal involved. Make your bank dispute it for you
with PayPal. You'd get a refund because you never authorised it.

BTW, this is why I have 2 bank accounts. One is my regular one,
and one specifically for PayPal. When I get a payment by PayPal,
I transfer the money to my regular one so PayPal can't touch it.
The PayPal account usually has $0.00 in it until I need it. ;)

Lastly, see what PayPal has to say about identifying scams:

https://www.paypal.com/au/webapps/mpp/phishing
I compile using 5.31 (x86) on Win 7 Ultimate (64-bit).
"PureBasic won't be object oriented, period" - Fred.
User avatar
Fangbeast
PureBasic Protozoa
PureBasic Protozoa
Posts: 4747
Joined: Fri Apr 25, 2003 3:08 pm
Location: Not Sydney!!! (Bad water, no goats)

Re: Paypal

Post by Fangbeast »

I actually got an email notification of a withdrawal from a "Sergey Rhozenko" for $190 for an item he claimed I had purchased. Never heard of him and the item was unspecified, that was also suspicious.

Legitimate paypal transaction (Which I checked in my paypal login) and PayPal had removed the money from my bank account.

Bogus user and item and I traced it to a Russian site but no mention of the person there nor the service or item claimed.

Opened up a dispute with PayPal and they attempted to contact them with no result and I got the money back. Subsequently removed all bank account details from PayPal and I now pay the slow way for everything.

PayPal explained that I probably used the same password on too many other places and an automated robot captures these randomly and then uses another robot to try them all on sites like this until one works.

I must remember to always change passwords at random.
Amateur Radio, D-STAR/VK3HAF
IdeasVacuum
Always Here
Always Here
Posts: 6425
Joined: Fri Oct 23, 2009 2:33 am
Location: Wales, UK
Contact:

Re: Paypal

Post by IdeasVacuum »

If you have ever registered with Adobe, then that is probably where they got your details from.........
IdeasVacuum
If it sounds simple, you have not grasped the complexity.
jack
Addict
Addict
Posts: 1336
Joined: Fri Apr 25, 2003 11:10 pm

Re: Paypal

Post by jack »

about passwords, I started using a javascript password generator found at this site http://ss64.com
IdeasVacuum
Always Here
Always Here
Posts: 6425
Joined: Fri Oct 23, 2009 2:33 am
Location: Wales, UK
Contact:

Re: Paypal

Post by IdeasVacuum »

about passwords, I started using a javascript password generator found at this site http://ss64.com
Well that is not a good idea because the author of that site now has all of your passwords............
IdeasVacuum
If it sounds simple, you have not grasped the complexity.
jack
Addict
Addict
Posts: 1336
Joined: Fri Apr 25, 2003 11:10 pm

Re: Paypal

Post by jack »

I see you did not check it out
This password generator works using Javascript, entirely within the page, no data is ever passed back to my server. Notwithstanding this, it is a very good idea to save your own copy of this page. Keeping your own copy ensures that the password generator will still be available to you even if this website goes off-line. You can also View-Source and see exactly how the javascript works, copy it to a USB stick, email it to yourself, even upload it to your own website (it’s open source.) There are no dependent files, just save as a single HTML file.
I use the extra strong version http://ss64.com/pass/
IdeasVacuum
Always Here
Always Here
Posts: 6425
Joined: Fri Oct 23, 2009 2:33 am
Location: Wales, UK
Contact:

Re: Paypal

Post by IdeasVacuum »

You are trusting the word of someone you have never met or know anything about. The reality is, it could be a well-defined scam giving all the comfort phrases necessary to entice you to oblivion. Sure, it could well be completely genuine, but I don't think the risk is justified.

If you want safe passwords, write your own private app in PB.
IdeasVacuum
If it sounds simple, you have not grasped the complexity.
davido
Addict
Addict
Posts: 1890
Joined: Fri Nov 09, 2012 11:04 pm
Location: Uttoxeter, UK

Re: Paypal

Post by davido »

Hi IdeasVacuum,

Sounds like very good advice to me.
DE AA EB
User avatar
Joakim Christiansen
Addict
Addict
Posts: 2452
Joined: Wed Dec 22, 2004 4:12 pm
Location: Norway
Contact:

Re: Paypal

Post by Joakim Christiansen »

Someone could have hacked your computer and stolen the passwords saved in your browser to get access to your PayPal account. I did that once, I stole 5 dollars (donated them to a good case) as a proof of concept :twisted:
I like logic, hence I dislike humans but love computers.
User avatar
luis
Addict
Addict
Posts: 3876
Joined: Wed Aug 31, 2005 11:09 pm
Location: Italy

Re: Paypal

Post by luis »

Joakim Christiansen wrote:Someone could have hacked your computer and stolen the passwords saved in your browser to get access to your PayPal account.
Do you mean someone may really let the browser store his banking, paypal and similar sensitive passwords ?
Why don't publish them on facebook then. :shock:



@netmaestro, here you can find the text of some scam email "from" paypal -> http://www.millersmiles.co.uk/search/PayPal

But you didn't get one, right ? Just got the email for the movement on the paypal account.
If that's what happened, seems like your credential have been used to authorize it and so probably your account has been compromised. Did you keep your login data in some vulnerable place on the PC ?

I seem to remember you got some unwanted guest on your PC before, maybe you should consider tightening up security for the future, clearly you are vulnerable in some way, unless as you say paypal got hacked. But the simplest answer often is the right one.
"Have you tried turning it off and on again ?"
A little PureBasic review
User avatar
netmaestro
PureBasic Bullfrog
PureBasic Bullfrog
Posts: 8425
Joined: Wed Jul 06, 2005 5:42 am
Location: Fort Nelson, BC, Canada

Re: Paypal

Post by netmaestro »

Thanks for the replies, they were all helpful! The problem does seem to be that I used the same password in too many places and I did use it at Adobe in the last few months. I won't be doing that anymore. Anyway I was able to get ahead of this within a couple of hours of the theft and the stop payment at the bank succeeded so - Whew! :shock:
Alec Baldwin in 'State & Main' wrote:So that happened...!
BERESHEIT
User avatar
Kuron
Addict
Addict
Posts: 1626
Joined: Sat Oct 17, 2009 10:51 pm
Location: Pacific Northwest

Re: Paypal

Post by Kuron »

netmaestro; I am glad you got it sorted and were able to get the stop payment in time. That is a hefty chunk of money to be worried about.
Best wishes to the PB community. Thank you for the memories. ♥️
Post Reply