PayPal account hacked ?!

jamescd

I've just had $480 sent from my account 2 days ago. I only saw the notification e-mail today. Thought it was a scam e-mail at first, as there's no way I wouldn't know if I had paid $480 for something. Opened up a new tab, logged in to Paypal, and sure enough $480 + transaction fee had been taken.

Thankfully, even after 2 days, it was still unclaimed and I was able to cancel. I've changed my password, security questions, etc.

Did someone manage to hack into my account or guess my password ?! Its put me off using PayPal now, think I'll just remove my debit card as well :eek:

Mick Murdock

Is it the same as your Ebay password and have you changed that since the security issue?

johndoe99

did you notify PayPal ?

Virtual

These things happen. You shouldn't stop using PayPal, but you should use a complicated and different password for each website you have an account on. Specially accounts with money.
Use LastPass if you can't remember them.

jamescd

Mick Murdock wrote: »

Is it the same as your Ebay password and have you changed that since the security issue?

Yeah they were different and I changed my password and security questions straight away.

johndoe99 wrote: »

did you notify PayPal ?

Yeah I e-mailed them asking to confirm if it's cancelled and if I'll get my money back.

Virtual87 wrote: »

These things happen. You shouldn't stop using PayPal, but you should use a complicated and different password for each website you have an account on. Specially accounts with money.
Use LastPass if you can't remember them.

I did have a complicated enough password and someone still managed to guess it/crack it or whatever. Dont know, just don't feel safe using it anymore

Kenjataimu

jamescd wrote: »

I've just had $480 sent from my account 2 days ago. I only saw the notification e-mail today. Thought it was a scam e-mail at first, as there's no way I wouldn't know if I had paid $480 for something. Opened up a new tab, logged in to Paypal, and sure enough $480 + transaction fee had been taken.

Thankfully, even after 2 days, it was still unclaimed and I was able to cancel. I've changed my password, security questions, etc.

Did someone manage to hack into my account or guess my password ?! Its put me off using PayPal now, think I'll just remove my debit card as well :eek:

Was it PayPal gift or a normal transaction?

Put in a PayPal dispute /claim anyways, they shouldn't be able to withdraw those funds while there is a dispute open.

Nody

From my experience what people call "someone hacked my password" usually morphs into "I had a trojan on my PC" more often then not. Chances are they did not hack your password at all.

Kenjataimu

jamescd wrote: »

I did have a complicated enough password and someone still managed to guess it/crack it or whatever. Dont know, just don't feel safe using it anymore

Any family member or friend know your login details?

Do a full scan of your computer as well in case you have some sort of virus.
Malwarebytes program is good (might have spelt it wrong)
There is a forum somewhere on here that would be able to advise you better than I can :-)

jamescd

Proco Jr. wrote: »

Was it PayPal gift or a normal transaction?

Put in a PayPal dispute /claim anyways, they shouldn't be able to withdraw those funds while there is a dispute open.

I was charged $480 + $16 in transaction fees, so I'm guessing it was a gift ? I think the sender gets charged the transaction fee if it's a gift, or maybe I have it the other way round.

It was still unclaimed and I was able to cancel it. It says on the transaction history that it is cancelled and it's been credited back to my card. Should I still open a dispute anyway ?

Nody wrote: »

From my experience what people call "someone hacked my password" usually morphs into "I had a trojan on my PC" more often then not. Chances are they did not hack your password at all.

Proco Jr. wrote: »

Any family member or friend know your login details?

Do a full scan of your computer as well in case you have some sort of virus.
Malwarebytes program is good (might have spelt it wrong)
There is a forum somewhere on here that would be able to advise you better than I can :-)

No, none of my family members/friends know any of my log-in detals.

I don't visit any dodgy sites, install illegal programs, etc. Last thing I remember installing is an adobe flash player update. I'll do a full scan anyway just to be on the safe side.

Kenjataimu

Don't think you can start a dispute with PayPal gift.

But it sounds like you are ok since you could cancel it.

Let us know how you get on anyways, hopefully it'll be sorted easily enough.

jamescd

Proco Jr. wrote: »

Don't think you can start a dispute with PayPal gift.

But it sounds like you are ok since you could cancel it.

Let us know how you get on anyways, hopefully it'll be sorted easily enough.

I will. Have to wait 2 or 3 days for the refund to appear in my bank account though. Nothing I can do but wait

Nody

jamescd wrote: »

I don't visit any dodgy sites, install illegal programs, etc. Last thing I remember installing is an adobe flash player update. I'll do a full scan anyway just to be on the safe side.

I'm not implying you've visited www.dodgysexwebsite.com here; but chances are if you got a good password that they did not dictionary attack it on Paypal. Hence they got it either from another site you used the same password, from a saved e-mail/file or the third option of a trojan snuck on to your PC. It could have been done via borrowing a USB memory a year or two ago or something completely innocent such as a add on update or even something you was not even aware was installed.

The reason is simply that chances of them hacking Paypal's DB and getting your password is, well, pretty much non existent; same with any attempt to dictionary attack it (they would been blocked way to early). Chances a random Paypal employee would get the access, see it and send it about the same which leaves your side as the most likely attacked point of entry.

Mick Murdock

Once the money was unclaimed you are fine. I wouldn't worry about it. It will be returned to your account.