PayPal Account Highjacked -- Beware

sleepycarol · Post by **sleepycarol** » Fri Jan 11, 2008 9:58 pm

Please for those that are using PayPal be aware that your account may be come compromised.

I have bought and sold on eBay for the last 8 years and have not encountered any problems with my PayPal account what so ever. For the past 3 months I have not sold any items on eBay. I have purchased a few items.

I am extremely careful about opening any emails that I do NOT know where they came from as I don't want spyware or adware on my computer.

Imagine my surprise when I checked my paypal account and found several thousand dollars of fraudlent charges to my PayPal account!!!

If one of the Goodman's read this please let us know what security steps are being taken with cpapauction in order to protect our accounts and Paypal activity.

I am not blaming cpapauction for my misfortune but want to warn others that this CAN happen to them.

We must remain vigilant in our quest for convenience and yet we must protect our ourselves from this type of fraud.

6PtStar · Post by **6PtStar** » Fri Jan 11, 2008 11:22 pm

Carol, you are scaring me. What was the outcome of the charges? Do we have any recourse it this. Was PayPal hacked. There is nothing on my computer about my PayPal account, it is all on their site at least I thought it was. I closed out my account some years ago because of fears like this. I recently reopened it when I needed to buy some cpap items.

Jerry

Krelvin · Post by **Krelvin** » Fri Jan 11, 2008 11:43 pm

You must have something setup wrong on your PayPal account because NOTHING happens on any of my PayPal accounts without me being notified.

That includes password changes, any purchases, any payments, attempts to add new users etc...

Even if your password was obtained, you would still get an email telling you that the password was changed, the email address was being changed etc...

You should never click on any email that you get saying it is PayPal. Always log in directly using the https://www.paypal.com URL. Anything they send you via email will show when you are logged in.

As a rule, I check all my credit cards on a very regular basis and contact them when I see anything that doesn't look right.

I also use LifeLock... they call me whenever anyone attempts to open a line of credit in my name... my wife just loves that though she has it too.

Sleepy Dog Lover · Post by **Sleepy Dog Lover** » Sat Jan 12, 2008 12:15 am

It happened to me too. I have very little activity on my account, and all of a sudden, a $1,600 charge was withdrawn from my account. It showed a winning bid on some guitar, which I had not so much even looked at. And the person that got the money was not the seller of the guitar. I did get my money back from paypal, I had to file a complaint and it took about 10 days. PayPal has a guarantee on their accounts, but they have to investigate first. Good Luck, and make sure that you file that complaint with PayPal.

sleepycarol · Post by **sleepycarol** » Sat Jan 12, 2008 3:39 am

I have never encountered a problem with my PayPal account until NOW..

Like I stated I have bought and sold on eBay since 2000. I visit their chat room on a regular basis and have heard all of the scary stories about accounts being hijacked and so am fully aware of being very careful. I DO NOT click on any unfamiliar emails that I don't know where they originate from, do not give out my passwords, look for the phishing emails, do not click links in any email but go directly to the site that is listed in the email, and other steps.

Several years ago I was running auctions on a regular basis on eBay and had THAT account hijacked. Someone listed a high priced car with my user name and password. I listed an item and the next item that I tried wouldn't and eBay had caught this immediately and blocked access to my account. Long story -- it was a nightmare.. I contacted eBay immediately and they opened an investigation into the matter. That ad was removed, but I agreed that my other ads were legitimate and they were not removed. Unfortunately my account was still blocked until after a thorough investigation and so I had no way of contacting any bidders that might bid on my items, couldn't send invoices to the winners, etc. I had to contact Paypal (account that time was NOT breached), credit card companies, close accounts and reopen new ones, etc. It was about a month before it was all cleared up. A big nightmare. NO MONEY EXCHANGED HANDS ON THIS ONE as it involved my eBay account.

So needless to say I am more wary than your typical user. My husband has NO interest in any of my online activities and has NEVER been on my eBay or PayPal accounts. He knows NONE of my passwords. He is only on the computer for work related things. He is pretty much computer illiterate and if he wants to check weather or anything I have to help negotiate his way around. I seriously doubt he would do this.

What happened to be more specific.

I was bidding on a mask on cpapauction.com. I stayed up a little after my normal bedtime watching to see if I won. I checked my emails while reading the posts on here. In my emails I received some very official looking emails from PayPal dealing with money transactions. Usually these are phishing emails and will install spyware etc. on your computer by hacking into it (same goes for any type of email that is from banks, prizes, eBay, Paypal, and the list goes on and on).

I also received the email that I had won the auction (which has nothing to do with my troubles). I logged off from cpaptalk and went to my Paypal account to pay for my mask that I had won. Much to my suprise Paypal had restricted my account and I couldn't get in. MY PASSWORD WAS NOT CHANGED!!!! I was able to go through the process of verifying my account and was able to see recent transactions. To my HORROR several transactions HAD taken place for several thousand dollars. I immediately found a phone number and have alerted them and they have started an investigation. At this time, I informed them to leave the RESTRICTIONS on my account so NO ONE (not even me) can receive or send money through my account until after the investigation.

I have run my antivirus (I have it set up with a virus protection, spam block, firewall, etc.) to run daily. I ran about 9:00 this a.m. and I reran it tonight and didn't find anything on my computer.

I was told that many overseas (where they are out of the reach of our authorities in the states) have places that that is all they do is search out user names and passwords and they have computers there randomly pulling up accounts and then with the computer is constantly scanning random passwords until BINGO they hit yours and are let into your accounts.
I received this information from eBay when my eBay account was hijacked. I have multiple passwords and my passwords do not match with sites that I have to log in on. Example my eBay and PayPal account are not the same password, neither is my cpapauction.com password, etc.

Now the big question -- I have a mask that I have purchased and hope they are understanding enough to let me mail payment as I have NO way of sending the payment via PayPal.

jsmythe · Post by **jsmythe** » Sat Jan 12, 2008 5:37 am

Hi Carol, wow, this really is a horrible thing to happen to anyone! After reading it , I immediately went to my account!
How often do you change your passwords on your Paypal and banks account? I change mine quite often. And as far as the emails, here is a link that is quite helpful for a lot of important emails. You can see at a glance which ones to read or be leery of. I have had this for awhile and like it.

https://www.paypal.com/us/cgi-bin/websc ... ixOverview

For those reading, just check it out and see what you think,

Slinky · Post by **Slinky** » Sat Jan 12, 2008 5:55 am

Years ago now, PayPal's security was breached, fortunately, mine wasn't one of the several thousand accounts that were, but I closed my PayPal account, changed my Credit Card just in case and have NOT used PayPal again. If it is a site that does not allow you to call your CC account number in I do not buy off the net. Nor do I keep ANY of my financial info on my 'puter. I do have an OLD 'puter that does not have online access that I do keep my finances on. Despite more and more businesses encouraging us to access our accounts online I refuse to do so. I didn't even go to direct deposit of our checks until we were given no choice.

I once had a gas station attendant tell me that my CC had refused the charge. I knew that couldn't be right and told her to try again. She punched my numbers in. (And whilst she was at it copied down my number). The only reason I remembered the incident was because of the refusal when I hadn't used the card in a month. Sure enough the following month there were several charges made at that gas station that weren't mine for gas and cigarettes. Thankfully she made the mistake of also charging $300 worth of bedding from a catalog AND HAD THE ITEMS SHIPPED TO HER HOME ADDRESS!! Of course the charges were all taken off my acccount, and I did file a police report but the police did NOTHING because I suffered "no financial loss". The gas station owner fired her but he didn't prosecute. I was fit to be tied that she got away w/it but there was nothing I could do except that because the station owner didn't prosecute her I no longer do business w/them and I had gone there for gas for YEARS.

Just call me an old antique!!!

mindy · Post by **mindy** » Sat Jan 12, 2008 6:33 am

sleepycarol wrote:I have never encountered a problem with my PayPal account until NOW..

I ... do not click links in any email but go directly to the site that is listed in the email, and other steps.

Hi sleepycarol,

So sorry to hear about your PayPal troubles! I've gotten several emails purporting to be from PayPal that have a strange URL so I never go to the URL they list but always go to the main PayPal URL.

However, no matter how vigilant we are, there is *always* some risk. We can get into an auto accident on the way to a brick-and-mortars store, too! And there have been stores that have had their computer files hacked. I check all of my accounts at least weekly to be sure there's nothing fishy going on .... and breathe a small sigh of relief when they are ok.

Mindy

GumbyCT · Post by **GumbyCT** » Sat Jan 12, 2008 6:55 am

jsmythe wrote:https://www.paypal.com/us/cgi-bin/websc ... ixOverview

Why do I have to log-in to see this? Do us a favor - just copy/paste what YOU want us to know right here.

ps. I hope they get to the bottom of this for you.

jsmythe · Post by **jsmythe** » Sat Jan 12, 2008 7:23 am

GumbyCT wrote:
jsmythe wrote:https://www.paypal.com/us/cgi-bin/websc ... ixOverview
Why do I have to log-in to see this? Do us a favor - just copy/paste what YOU want us to know right here.

ps. I hope they get to the bottom of this for you.

When you log in to your account, go to Security Tools (on the left side of window) There you will find the Iconix security tool that PayPal uses on its emails, a lock with a check mark in it. You have to be logged in to download the tool.

GumbyCT · Post by **GumbyCT** » Sat Jan 12, 2008 7:36 am

jsmythe wrote:You have to be logged in to download the tool.

1st we're reading - now we're downloading stuff - this is how it starts. Think I'll pass, Thanks.

Pilot_Ron · Post by **Pilot_Ron** » Sat Jan 12, 2008 8:28 am

Thanks for the heads-up. Just changed my password again.

I'm surprised that paypal didn't contact you that there was a problem. Last year they sent me an e-mail stating that my account may have been compromised, and I had to contact them for all kinds of verification. I checked my account and there were no charges.

sleepycarol · Post by **sleepycarol** » Sat Jan 12, 2008 9:47 am

I change my password pretty often, but apparently not often enough.

I think that I "caught" it before they could do more damage. I called Paypal and my cc card company and will go to bank this morning. I was told that a thorough investigation will take place and I will not be responsible for the charges.

Like I have stated I am not a newbie and know the risk involved and have taken all the steps necessary in order to protect my identity, etc. I still fell through the cracks!!

IT CAN HAPPEN TO YOU!!! BE CAREFUL AND KEEP AN EYE OUT ON YOUR ACCOUNTS!!

Wulfman · Post by **Wulfman** » Sat Jan 12, 2008 1:08 pm

I always used to get fraudulent e-mails.....SUPPOSEDLY from PayPal, telling me about transactions on my PayPal account and to connect to the site (in their link) and fix it. Well.....I DIDN'T HAVE a PayPal account. I hope you folks aren't falling for some sneaky thing like that and have actually given your actual account information to some Internet crooks.

Den

Pilot_Ron · Post by **Pilot_Ron** » Sat Jan 12, 2008 1:19 pm

Wulfman wrote:I always used to get fraudulent e-mails.....SUPPOSEDLY from PayPal, telling me about transactions on my PayPal account and to connect to the site (in their link) and fix it. Well.....I DIDN'T HAVE a PayPal account. I hope you folks aren't falling for some sneaky thing like that and have actually given your actual account information to some Internet crooks.

Den

When I said they contacted me, it wasn't some phishing scheme. They didn't have a link to go to, it was just a notice that there was a problem. I contacted paypal directly (called them) and the email was lagitimate. I have seen the phishing emails, and if you roll your mouse over the link, it is easy to see that it's not a paypal site.

Humidifier

Additional Comments: Remstar Auto A-Flex Aussie Heated Hose Auto 8-15 cm H2O pressure A-Flex 2 Backup Remstar Plus w/C-Flex