Discussion Forums - Questions about PaperBackSwap Questions about PaperBackSwap

Topic: Paypal account was hacked and bank account emptied :(

Club rule - Please, if you cannot be courteous and respectful, do not post in this forum.
Page:   Unlock Forum posting with Annual Membership.
Subject: Paypal account was hacked and bank account emptied :(
Date Posted: 4/22/2009 1:51 PM ET
Member Since: 2/20/2009
Posts: 258
Back To Top

I went to the grocery store today to buy my rabbits and guinea pig some veggies and myself some bottled water...only to find out as trying to cash out, that my bank account is empty. I come home and sign onto my banks website and see a large withdrawal from paypal which took every thing from my checking and most of my savings. I called paypal and they said it may take up to 10 days to get my money back. I don't know what I'm going to do until then. :( This is the only site I've used my paypal for in a very long time. Could someone have some how gotten my paypal info from here?

Date Posted: 4/22/2009 1:53 PM ET
Member Since: 7/3/2008
Posts: 4,984
Back To Top

hmmm it doesn't seem likely. Did you check your recent transactions? That should tell you what deducted the money.

Date Posted: 4/22/2009 1:55 PM ET
Member Since: 2/20/2009
Posts: 258
Back To Top

There is an email address listed that I do not know.

Date Posted: 4/22/2009 1:59 PM ET
Member Since: 7/3/2008
Posts: 4,984
Back To Top

hmmm, try to google it maybe, see if anything comes up with scammers. Maybe someone got your email and password somehow, through a fredulent (however u spell that) email from ebay (but not really ebay) or a fake paypal site. Gotta be careful for that.

Anissa (WVgrrl) - ,
Date Posted: 4/22/2009 2:33 PM ET
Member Since: 1/16/2009
Posts: 432
Back To Top

Did you contact your bank as well? They may be able to do something faster than paypal can. This is really awful. I'm so sorry for you.

Date Posted: 4/22/2009 2:59 PM ET
Member Since: 1/28/2007
Posts: 765
Back To Top

I am so sorry to hear about your misfortune.

I like to warn ppl that they should not connect their bank account to PayPal if they only use PayPal to buy (not sell).  If you sell (receive money) then PayPal will frustrate you with fees and limits until you connect to your bank account.  I would rather not sell at all so that I don't have to connect PayPal to my bank account.  Therefore I quit selling on EBay because of this account connection requirement.  That's what I did.

If you don't use PayPal to sell, then you are much safer funding PayPal payments using your credit card (not debit card) as the source of funds.  Also you retain your credit-card-chargeback-rights when using PayPal via credit card as the source of funds, so if you receive a crappy product it is very easy to get your money back without relying on PayPal's claim procedures.

Dan (for Marilyn)

Date Posted: 4/22/2009 3:01 PM ET
Member Since: 2/19/2008
Posts: 2,007
Back To Top

Happened to my g/f two weeks ago and took about four days to straighten out.

The really funny part?  The scammer had absolutely no clue what kind of (bleep) they stepped in...  My g/f is a Fed, and her last assignment was Internet fraud.  The scammer currently has a Federal warrant out for their arrest.  :)

 

Subject: paypal
Date Posted: 4/22/2009 3:07 PM ET
Member Since: 3/12/2009
Posts: 9
Back To Top

I'm also sorry for your account being stolen.  I don't keep much in the acct that uses Paypal, but I also use their new key token device.  I have to generate a new number each time I long in, I have never had any bogus charges with paypal, but have with other debit/credit cards online.  I keep a strict vigil on my accts because of that.

Pam R

 

Date Posted: 4/22/2009 3:25 PM ET
Member Since: 1/28/2007
Posts: 765
Back To Top

A long time ago (2002) in a lawsuit against PayPal (which was about these bank account drains I believe) PayPal brought a motion to compel individual arbitrations of the plaintiffs' claims.  The Court, finding both the User Agreement and its arbitration clause unconscionable, denied PayPal's motion to compel arbitration.  http://www.internetlibrary.com/cases/lib_case302.cfm

I belive that they learned their lesson since then and take care of these account drains to their customers satisfaction.  Though I'm not sure.  Does anyone know if PayPal repays your funds even if you fell for a scam?

Date Posted: 4/22/2009 3:29 PM ET
Member Since: 10/6/2007
Posts: 376
Back To Top

but I also use their new key token device.

Thanks for this info! It took me a while to locate it on the pp website, but I ordered one as well. It's a good idea.

Date Posted: 4/22/2009 4:26 PM ET
Member Since: 6/21/2007
Posts: 2,015
Back To Top


Last Edited on: 2/3/15 7:58 PM ET - Total times edited: 1
Ellie (EllieW) - ,
Date Posted: 4/22/2009 5:32 PM ET
Member Since: 3/5/2007
Posts: 1,479
Back To Top

I had a similar situation a couple months ago with Paypal. I never clicked on an email or anything either. Someone just hacked my account. It was someone from China and they only got $200 thank goodness from my bank account. It took close to three weeks for the problem to be resolved and the money returned.

I have since removed my bank account and use credit card only for paypal.

Date Posted: 4/22/2009 6:38 PM ET
Member Since: 1/28/2007
Posts: 765
Back To Top

Smart move Ellie.  Here's one security vulnerability that I uneasy about.  Some of us create accounts all over the place.  Facebook this, Twitter that,  Mail something else.  Not to mention photo sharing, order pet meds, and on, and on, and on.

You can't remember that many unique username/passwords so you either need to reuse the same username/password or write them down.  Both methods are security risks so I use the same username/password in many places except my money places.

I wonder how secure my information is with places like pet meds, tool venders, and other similar sites.  And I wonder about having my account info hacked in one place and used to gain access into another place (like PayPal for instance).

I once bought a computer from a place that supported Internet servers.  Guess what was on the hard drive?  Order databases were on there with names, addresses, phone numbers.  I don't recall whether username/password and account numbers were unencrypted or not.  I told the guy I bought it from and he said please erase the databases.  Talk about lax security!

Subject: password security and multiple sites
Date Posted: 4/22/2009 7:30 PM ET
Member Since: 7/12/2007
Posts: 23
Back To Top
One thing I do for all those different sites: my password is in three parts. I read of this basic system somewhere, it's not unique. 1) A string of characters that's meaningful to me but no one else. For you, it could be an acronym for a favorite saying or line from a song. 2) a series of numbers. ditto, useful to me. 3) letters that identify the site to me example: your favorite saying is the line "live and learn" so you have LAL then your best friend in elementary school moved away when you were 10 and you're on facebook So that password is LAL10FB Paperback Swap would then be LAL10PBS A longer series of letters and numbers would be best, but I think that illustrates it. I try to never, ever repeat passwords anywhere, so a meaningful and memorable system is key - but something not terribly hackable, either. And thanks, Pam R, for the key token mention - I hadn't realized that existed. I have it set up now.
Date Posted: 4/22/2009 7:53 PM ET
Member Since: 6/8/2007
Posts: 801
Back To Top

The same thing happened to my daughter last year.  There were 10 consecutive $50 Paypal withdrawals in a 2-hour span.  Our bank was able to get the situation resolved a lot faster than the 7-10 days Paypal said it would take, so I strongly suggest you contact your bank ASAP.

Date Posted: 4/22/2009 9:06 PM ET
Member Since: 1/28/2007
Posts: 765
Back To Top

Jennifer:  >>One thing I do for all those different sites: my password is in three parts.<<

Thanks Jennifer for your input, I appreciate other viewpoints on username/password security.  But just to poke at that a bit, let's say I hacked a Username/password=LAL10PBS here on PaperBackSwap what's to stop me from trying username/LAL10PP on PayPal?

But your method does add an extra level of protection which is always good. Please don't take offense at my reply.  That is certainly not my intention.  I'm just trying to elaborate on this vulnerability.

Date Posted: 4/22/2009 9:13 PM ET
Member Since: 1/28/2007
Posts: 765
Back To Top

Oh, I forgot to add this.  Whatever username/password system you use, you should use something UNIQUE when it's for your $$money

Dan (for Marilyn).

Subject: PP
Date Posted: 4/22/2009 9:29 PM ET
Member Since: 8/23/2006
Posts: 1
Back To Top

I have no idea how that could happen. But, I feel so bad for you. Let me know if you find out so I can prevent it from happening to me. KLM

Date Posted: 4/22/2009 9:49 PM ET
Member Since: 7/12/2007
Posts: 23
Back To Top
Marilyn, that's a good point. I should have specified that I use that system on things like facebook, here, etc. For FINANCIAL websites, I have long convoluted things that I used a password-generating program to create. Another thing: everyone always says "don't write your passwords" down - well, don't stick them on a post-it on your monitor. Keep it in a safe place in your home. If you need a strong password but won't remember it, having it stored in your filing cabinet under "timmy's kindergarten artwork" or something offbeat is safe enough. Somebody's going to hack your account from afar, not by breaking into your house and digging through every piece of paper in the house to find your passwords.
Date Posted: 4/22/2009 10:06 PM ET
Member Since: 1/28/2007
Posts: 765
Back To Top

An attagirl for you Jennifier!

My financial website passwords or a combination of a BIG-LONG-SPEICFIC-TO-ME-PHRASE that I will remember plus NUMBERS-SPECIFIC-TO-ME that are reversed in a random pattern that I remenber.

btw> you give me too much credit.  It's not Marilyn. :))

Dan (for Marilyn)

Date Posted: 4/22/2009 10:14 PM ET
Member Since: 7/12/2007
Posts: 23
Back To Top
Sorry. First post didn't say you were Dan, just the second. :) I always hate when I call people by the wrong name!
Date Posted: 4/22/2009 11:23 PM ET
Member Since: 7/7/2007
Posts: 4,815
Back To Top

I'm sorry you're having such a frustrating experience, Brenda, and hope it gets resolved quickly.

For those of you interested in the "key token device", search for "PayPal Security Key".

Cheers,
Catt



Last Edited on: 4/24/09 3:10 AM ET - Total times edited: 1
Date Posted: 4/23/2009 7:22 AM ET
Member Since: 5/29/2007
Posts: 13,347
Back To Top

If you file a police report, take that to your bank, they should be able to refund your money rather quickly. 

Date Posted: 4/23/2009 9:54 AM ET
Member Since: 4/22/2005
Posts: 5,527
Back To Top

One of the many reasons I refuse to use PayPal. Sorry this happened to you.

Date Posted: 4/23/2009 10:16 AM ET
Member Since: 4/21/2007
Posts: 304
Back To Top

Pam R Thank you for the information on the key token. I have one on the way to me as we speak.

Page: