<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>gHacks technology news &#187; unauthorized payment</title>
	<atom:link href="http://www.ghacks.net/tag/unauthorized-payment/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.ghacks.net</link>
	<description>A technology blog covering software, mobile phones, gadgets, security, the Internet and other relevant areas.</description>
	<lastBuildDate>Mon, 23 Nov 2009 22:22:46 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.6</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Update on my PayPal Story</title>
		<link>http://www.ghacks.net/2008/07/17/update-on-my-paypal-story/</link>
		<comments>http://www.ghacks.net/2008/07/17/update-on-my-paypal-story/#comments</comments>
		<pubDate>Thu, 17 Jul 2008 09:03:36 +0000</pubDate>
		<dc:creator>Martin</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[paypal]]></category>
		<category><![CDATA[paypal payment]]></category>
		<category><![CDATA[paypal security]]></category>
		<category><![CDATA[The Tech Herald]]></category>
		<category><![CDATA[unauthorized payment]]></category>
		<category><![CDATA[VeriSign]]></category>

		<guid isPermaLink="false">http://www.ghacks.net/?p=5373</guid>
		<description><![CDATA[I noticed in the beginning of July that someone else transferred most of the money that had been in my PayPal account to an online hoster to buy six month access to an virtual server. That was quite shocking and you can read up on theUnauthorized Payment Done With My PayPal Account story. I got [...]]]></description>
			<content:encoded><![CDATA[<p>I noticed in the beginning of July that someone else transferred most of the money that had been in my PayPal account to an online hoster to buy six month access to an virtual server. That was quite shocking and you can read up on the<a href="http://www.ghacks.net/2008/07/02/unauthorized-payment-done-with-my-paypal-account/">Unauthorized Payment Done With My PayPal Account</a> story. I got the money back the same day because the merchant was nice enough to post a full refund of the money after I submitted a dispute on the PayPal website.</p>
<p>The analysis of my computer did not turn up anything that could have been used to grab my PayPal credentials and make the transfer and I did scan it with a multitude of scanners.</p>
<p>The support line at PayPal was not helpful at all and could not even tell me if I was the only one that has logged into my own PayPal account recently claiming that it was against their privacy policy to disclose such data. That was <strong>very</strong> unfortunate because it would have helped me tremendously to know if someone logged into my account to make the payment.</p>
<p><span id="more-5373"></span>I was contacted at the same day by Steve Ragan from <a href="http://www.thetechherald.com/article.php/200827/1391">The Tech Herald</a> who published an interview about the case on the website. That interview seemed to have sparked the interest of PayPal because I was shortly after contacted by their CISO who wanted to transfer my case to a specialized team, he called it <strong>unusual e-crimes investigations team</strong>. That was a pleasant surprise and I had hopes that I would finally find out how the money was transferred.</p>
<p>Unfortunately though I have not heard back yet and I&#8217;m not sure if I ever will. I know that some big companies are rather slow when working on cases but it has been two weeks and no reply since.</p>
<p>Last but not least Steve contacted me again telling me that the guys at <a href="http://www.verisign.com/">VeriSign</a> would like to send me one of those PayPal Security Key after they have heard the story which is really nice of them. Unfortunately though I have ordered one already which has not arrived yet. It&#8217;s also been two weeks since then and I&#8217;m beginning to see a pattern here. So VeriSign nice, PayPal not so nice. I will keep you updated if I&#8217;m ever contacted again by PayPal about this matter.</p>
<p><strong>Update:</strong></p>
<p>I received both the PayPal Security Key and the VeriSign ID Protection key shortly after finishing the article. Will write about those soon.</p>

	Tags: <a href="http://www.ghacks.net/tag/paypal/" title="paypal" rel="tag">paypal</a>, <a href="http://www.ghacks.net/tag/paypal-payment/" title="paypal payment" rel="tag">paypal payment</a>, <a href="http://www.ghacks.net/tag/paypal-security/" title="paypal security" rel="tag">paypal security</a>, <a href="http://www.ghacks.net/tag/the-tech-herald/" title="The Tech Herald" rel="tag">The Tech Herald</a>, <a href="http://www.ghacks.net/tag/unauthorized-payment/" title="unauthorized payment" rel="tag">unauthorized payment</a>, <a href="http://www.ghacks.net/tag/verisign/" title="VeriSign" rel="tag">VeriSign</a><br />

	<h4>Related posts</h4>
	<ul class="st-related-posts">
	<li><a href="http://www.ghacks.net/2008/07/02/unauthorized-payment-done-with-my-paypal-account/" title="Unauthorized Payment Done With My PayPal Account (July 2, 2008)">Unauthorized Payment Done With My PayPal Account</a> (50)</li>
	<li><a href="http://www.ghacks.net/2008/11/24/paypal-now-offering-mobile-security-key/" title="PayPal Now Offering Mobile Security Key (November 24, 2008)">PayPal Now Offering Mobile Security Key</a> (2)</li>
	<li><a href="http://www.ghacks.net/2008/07/19/protect-paypal-accounts-with-verisign-identity-protection-devices/" title="Protect PayPal Accounts With VeriSign Identity Protection Devices (July 19, 2008)">Protect PayPal Accounts With VeriSign Identity Protection Devices</a> (19)</li>
	<li><a href="http://www.ghacks.net/2009/11/09/paypal-login/" title="PayPal Login (November 9, 2009)">PayPal Login</a> (1)</li>
	<li><a href="http://www.ghacks.net/2006/06/29/send-a-fax-to-unsubscribe-from-paypals-newsletter/" title="Send a Fax to unsubscribe from paypals newsletter (June 29, 2006)">Send a Fax to unsubscribe from paypals newsletter</a> (4)</li>
</ul>

]]></content:encoded>
			<wfw:commentRss>http://www.ghacks.net/2008/07/17/update-on-my-paypal-story/feed/</wfw:commentRss>
		<slash:comments>8</slash:comments>
		</item>
		<item>
		<title>Unauthorized Payment Done With My PayPal Account</title>
		<link>http://www.ghacks.net/2008/07/02/unauthorized-payment-done-with-my-paypal-account/</link>
		<comments>http://www.ghacks.net/2008/07/02/unauthorized-payment-done-with-my-paypal-account/#comments</comments>
		<pubDate>Wed, 02 Jul 2008 07:51:32 +0000</pubDate>
		<dc:creator>Martin</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[paypal]]></category>
		<category><![CDATA[paypal payment]]></category>
		<category><![CDATA[unauthorized payment]]></category>

		<guid isPermaLink="false">http://www.ghacks.net/?p=5168</guid>
		<description><![CDATA[I usually check my emails right after I wake up and received a PayPal email receipt this morning that told me that the amount of $480 was transferred from my account. I first thought that this was a phishing email and checked the links and headers but it turned out to be legit. I was [...]]]></description>
			<content:encoded><![CDATA[<p>I usually check my emails right after I wake up and received a PayPal email receipt this morning that told me that the amount of $480 was transferred from my account. I first thought that this was a phishing email and checked the links and headers but it turned out to be legit. I was slightly nervous at that time and decided to log into PayPal to see if the transaction would be found there as well.</p>
<p>Imagine my surprise when I discovered that a payment for all the money in the PayPal account has been made at 23:35:35 PDT to Santrex Internet Services. I was not awake at that time which could only mean that someone else managed to make the transaction. The question is how.</p>
<p>I contacted PayPal and filed for unauthorized payment and did contact the &#8220;seller&#8221; as well who replied telling me that someone did buy Virtual Servers from the money. I&#8217;m pretty sure that I will get the money back the question however is how someone was able to make that transaction in first place.</p>
<p><span id="more-5168"></span>The possibility is there that someone was able to get my password for PayPal somehow and made the transaction that way. I&#8217;m not sure if there is a possibility to make a transaction from PayPal without logging into the account. It does not look this way.</p>
<p>I checked my system with latest anti-virus software and found nothing. I also checked the PayPal account settings and changed the passwords there. I will change all passwords for all sites just to make sure that someone did not get them all.</p>
<p>The strange thing is that the payment was only made for the amount that I had lying around in my account. Anyone ever heard of something like that ? The real question is how he was able to get into my account as it is unlikely that transactions could have been made without my <a href="http://www.connectedinternet.co.uk/2009/11/08/paypal-login-page-and-other-safety-tips/">PayPal login</a> data.</p>

	Tags: <a href="http://www.ghacks.net/tag/paypal/" title="paypal" rel="tag">paypal</a>, <a href="http://www.ghacks.net/tag/paypal-payment/" title="paypal payment" rel="tag">paypal payment</a>, <a href="http://www.ghacks.net/tag/unauthorized-payment/" title="unauthorized payment" rel="tag">unauthorized payment</a><br />

	<h4>Related posts</h4>
	<ul class="st-related-posts">
	<li><a href="http://www.ghacks.net/2008/07/17/update-on-my-paypal-story/" title="Update on my PayPal Story (July 17, 2008)">Update on my PayPal Story</a> (8)</li>
	<li><a href="http://www.ghacks.net/2006/06/29/send-a-fax-to-unsubscribe-from-paypals-newsletter/" title="Send a Fax to unsubscribe from paypals newsletter (June 29, 2006)">Send a Fax to unsubscribe from paypals newsletter</a> (4)</li>
	<li><a href="http://www.ghacks.net/2008/07/19/protect-paypal-accounts-with-verisign-identity-protection-devices/" title="Protect PayPal Accounts With VeriSign Identity Protection Devices (July 19, 2008)">Protect PayPal Accounts With VeriSign Identity Protection Devices</a> (19)</li>
	<li><a href="http://www.ghacks.net/2008/04/19/paypal-to-block-unsafe-browsers/" title="PayPal to Block Unsafe Browsers (April 19, 2008)">PayPal to Block Unsafe Browsers</a> (6)</li>
	<li><a href="http://www.ghacks.net/2008/11/24/paypal-now-offering-mobile-security-key/" title="PayPal Now Offering Mobile Security Key (November 24, 2008)">PayPal Now Offering Mobile Security Key</a> (2)</li>
</ul>

]]></content:encoded>
			<wfw:commentRss>http://www.ghacks.net/2008/07/02/unauthorized-payment-done-with-my-paypal-account/feed/</wfw:commentRss>
		<slash:comments>50</slash:comments>
		</item>
	</channel>
</rss>
