Google/Ebay issue--freaking out a little

steve B · #1 08-03-2020, 10:23 PM

The way Paypal does two factor authentication is extremely poor.

We had ours compromised a couple years ago, not via the Paypal or Ebay sites, but through email.
Using the email, the email password was changed, then the paypal password, all via the "I forgot my password" link.
Then they sent two payments to some foreign country.
We changed everything back, contacted the bank, which said they had to let the fraudulent charges go through before they could cancel them??
Filed complaints with Paypal first, and in less than 12 hours they denied them saying that me sending $400 to zimbabawe or wherever and twice in the same day was "normal activity"

So passwords changed, email tied to the account changed, 2FA set up. None of it done from the computer as we suspected a keylogger that the anti malware/virus software didn't catch (and still hasn't so I haven't been able to trust the computer for 2 years... )

A month later, the same thing. But a bit slicker.
Oh yeah. Paypal sends a text asking if the payment is legit. At 4 AM. And if you don't respond they assume the payment is ok and send it through anyway. Making their 2FA worthless.

This time they covered their tracks a bit better by deleting the payment confirmation email from the server so I never received it.

Leon · #2 08-04-2020, 09:06 AM

Quote:

Originally Posted by steve B

The way Paypal does two factor authentication is extremely poor.

We had ours compromised a couple years ago, not via the Paypal or Ebay sites, but through email.
Using the email, the email password was changed, then the paypal password, all via the "I forgot my password" link.
Then they sent two payments to some foreign country.
We changed everything back, contacted the bank, which said they had to let the fraudulent charges go through before they could cancel them??
Filed complaints with Paypal first, and in less than 12 hours they denied them saying that me sending $400 to zimbabawe or wherever and twice in the same day was "normal activity"

So passwords changed, email tied to the account changed, 2FA set up. None of it done from the computer as we suspected a keylogger that the anti malware/virus software didn't catch (and still hasn't so I haven't been able to trust the computer for 2 years... )

A month later, the same thing. But a bit slicker.
Oh yeah. Paypal sends a text asking if the payment is legit. At 4 AM. And if you don't respond they assume the payment is ok and send it through anyway. Making their 2FA worthless.

This time they covered their tracks a bit better by deleting the payment confirmation email from the server so I never received it.

I have had some crazy hacks too but deleting the confirmation email is something I haven't heard of. That must be scamming 102.

.

MooseDog · #3 08-04-2020, 09:20 AM

Google provides a pretty easy way to manage your security. If you go here and log in to your Google account you can change the way your info is being used. To the OP you can remove that Google login to eBay here:

https://myaccount.google.com/security

Scroll down to the bottom to the section that says "Signing into other sites" then click on eBay and a "remove" button will appear. In fact, you can even turn off that "feature" completely here.

Likewise the links on the left side will allow you to control a lot of things in your Google account including how your data is used.

While I am no means an expert on such things, with the proper precautions I'm comfortable with the way Apple and Google handle this stuff, at least in my use case.

On the other hand I would NEVER trust Facebook. Period. Full disclosure I do not have a Facebook account, though I did create one for my dog for friends and family to share stuff.

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Wife FREAKING OUT about Christmas Sale- Need to sell- 53B Musial 54T Jackie	BanksFanForever	1950 to 1959 Baseball cards- B/S/T	2	12-11-2016 12:06 PM
Google Search Page	freakhappy	Net54baseball Vintage (WWII & Older) Baseball Cards & New Member Introductions	6	01-31-2013 12:57 PM
OT: Google gives a nod to Seinfeld	philliesphan	Net54baseball Vintage (WWII & Older) Baseball Cards & New Member Introductions	7	12-13-2012 10:26 AM
Google Website	DanP	Net54baseball Vintage (WWII & Older) Baseball Cards & New Member Introductions	11	02-04-2010 09:47 PM
Is that freaking NASA T206 Wagner back?	Archive	Net54baseball Vintage (WWII & Older) Baseball Cards & New Member Introductions	3	01-17-2002 11:19 AM