FYI Anyone can use your Pay Pal account



As of November 2011, (possibly sooner and definitely today) did you know anyone can access your PayPal account via PayPal’s other online payment option called “Bill Me Later”?

Yes… it is indeed a fact…. One I verified with an agent in the Security department of Pay PaL myself.

All they have to do is to have a valid email account (Hot Mail, etc., not your own or even the one you registered with PayPal), your name and your physical (billing/shipping) address?

This according to my own experience and the Pay Pal security/Fraud department agent I spoke with at length on the phone with yesterday afternoon. From that conversation I found out PayPal would rather deal with any possible fallout/fraud to their customers after the fact than before it, Merely for the sake of online shopping convenience..

Such was er, is my case currently.

Two purchases were made on different days for different items late last year and I received a late notice from Bill Me Later just recently indicating I owed them well over $100.

I must have tossed the first one figuring it was just more spam mail knowing full well I’ve not had dealings with “Bill Me Later”..

Why more measures aren’t instituted by PayPal up front like requiring at least your registered PP email account and registered PP password as a prerequisite for any Bill Me Later purchase is flat out ludicrous.

This is merely a heads up folks! Sort of thing and one I don’t believe many if anyone actually knows about… so I felt to pass along my experience and the how and why of it all for all those who use PayPal.

What you do with your own Pay Pal account is your business of course and I’m not advocating by this post people rush out and delete their accounts… it’s simply a note on how easy it is to become a victim if you have a PP acct in good standing..

My acct with Pay pal spanned almost seven years with perhaps only a bump or two in the road to date. I must say too, Bill Me Later and it’s parent company Pay Pal have been very good so far in assisting me with over coming this episode, though it is yet to be concluded. I even took PPs advice on initiating a Fraud Alert at Equifax online, and following up with my local police department and am awaiting the affidavits I need to supply Trans Union, Equifax and Experion so the 90 day Fraud alert will turn into a 7 Year alert to any creditor if someone (or myself) attempts to change, or open an account in my name

What a hassle!.

I closed my PayPal account this morning as the result of my own circumstances with this most recent personal ‘encounter of the worst kind with I. D. theft. . I don’t wish to be put in harm’s way so easily, nor do I wish to endure the subsequent fallout from so easy a path to financial catasthrophy,or jepordize my credit rating. Not to mention all the log in, password, phone number changing, at all of my critical online financial spots, and just plain worry that accompanies I. D. theft. All of which I’ve now been forced to do.

I’d at least want them to work for it, not to get in by simply knowing my name and address, have a Hot mail or Yahoo acct. and take a shot in the dark if I have a Pay Pal acct in good standing! Which is more or less, exactly what happened.

For the pessimiss, or those still in doubt, you can call PP and ask for yourself what is required to get an approval for a Bill Me Later transaction by calling 1 866 972 9725 and speaking with Pay Pal directly.

Thanks for your time.
blindjim
As a public service to us all I think everyone who has used Paypal on this site should contact Paypal like Bjim suggested and let them know this cavalier attiutde and ass-backwards system (BML) needs tighter controls. Remember the "sqeaky wheel gets the oil".

Lets try to give them some "Pushback" on this issue before someone else gets stung. I am sending mine today! Who is with me?

Hi! Rodman9999

If knowledge can create problems, it is not through ignorance that we can solve them. (Isaac Asimov)

Please, don’t kill the messenger

…..and thanks for finishing my illustration entirely with your comments. I had thought to leave that part out figuring it was easy enough to see… but that was indeed the impetus for this thread…

Public service… awareness.

ANYONE …. Past transaction partner … member of the family (either side) … someone dropping in on a poorly secured Wy Fy network … criminal… juvenile delinquent… thug with a little bro or sis that has immense PC abilities and is easily persuaded.. a neighbor… someone at your church… dumpster divers.
…. AT YOUR OWN job OR BUSINESS… etc.

Online or off! Warm up dem ‘shredders’ folks! Use 15 character passwords or greater!

Sticking your head in the sand only makes your ass a better target.

This deplorable issue stems from avarice alone. Paypal’s decided choice for convenience over that of safety for their client base.

Exactly what is PayPal’s risk here? Maybe… just maybe a smudge on their reputations visibility, and it will all be forgotten in time.

Unless a change for the better security of their subscribers is implemented.

For PayPal, it’s a mere matter of numbers. For us it’s not JUST the money but the fall out thereafter once your I D has been compromised. Trust me it will definitely suck if you have to go change everything that you have logged online, & off, so you have less chance of becoming a victim.

“Paypal wants to make it easy to buy online” said the Paypal security agent, “filling in forms and so forth inhibits and sometimes intimidates some people from shopping”.

Looks like PayPal has succeeded in making online shopping very easy to me… whether it’s your own account or not.

As it is current Paypal policy enables BOTH client and criminal to conduct transactions with a pitiful lack of scrutiny, thereby, placing all of their members at risk…. Though only PayPal’s reputation is or could be possibly on the line…. Depending on how visible this current loophole in security is made known to the public.

RE: Opening and closing one’s Paypal account during and following a transaction seems like about the only way to lessen a chance for injury… if you enjoy taking somewhat briefer risks.

It makes me think of the Deer Hunter…. That’s like having only one bullet in a revolver and playing Russian roulette, right? That’s the game where the loser really loses.

It only takes one bullet… one time.

Here’s another approach I think is safer and better…. Inundate PayPal with phone calls and emails reproaching their current procedures for Bill Me Later’s usage and/or attachment to one's PP acct.... Unsubscribe. Be a squeaky wheel. In fact I’m unsure if anything will make PayPal alter it’s course, but who knows, maybe the right person will answer the phone or read the email….. Eventually.

Or call a radio station... newspaper... magazine... Someone say Magazine? Online Magazine? Blogs & forums on other web sites?

Any responsible readers with a dash of public service and integrity ought to: do.

1. Investigate this concern for themselves PP Ph # - 1866 972 9725 or email them.

2. Take quick, noteable, obvious steps to safeguard themselves by what ever means or choices.

BUT YES, DO SOMETHING. AT ALL TIMES, PROTECT YOURSELF.

"All that is necessary for the triumph of evil is that good men do nothing." (Edmund Burke)
I've called a friend already and I'm calling Bill Me Later and paypal and ebay to cancell my account. Maybe people that know each other should use the ripoff trick (then of cource refund the friends money) to let paypal know we don't need to be billed later. I pay NOW or I don't buy. Thanks again for the heads up.
What happens if you do not sign up for bill me later and do not take that $10 they give you for signing up.
It's up to you to get your money back for fraud after the fact. Paypal gets theirs first. Check out paypalsucks.com Why should we be at risk when they should have insurance to cover their losses? Who regulates them? NOBODY.