Paypal hacked?

[Gintaras]

I've received a phone call from what's supposedly to be a Paypal customer service:

"you have to go to your account and do this and that: to enter user ID and password(!!!!). and to this and that...Unless you don't do that, your account will be de-activated...

Phone number I got call from: 402-935-7733.

Earlier this morning, I've got an e-mail, that my payment to XXXX.co has failed because of XXXX.co acount...we'll try to process payment on 2/20th.

No payments were pending from me...

So...looks like Paypal have been hacked...

 

[hclarkjr]

i would contact paypal and tell them this. i have received emails on few occasions that were scammers.

 

[Ichinisan]

PayPal may be aware that YOUR account is compromised. It doesn't mean "Paypal was hacked."

 

[edro]

Yeah, it's on CNN right now.

 

[Red Squirrel]

PayPal may be aware that YOUR account is compromised. It doesn't mean "Paypal was hacked."

Technically if there is a flaw allowing someone to gain access to an account, it would mean that they got hacked. Hopefully this is not the case, I have a Paypal account...

I'm guessing this was just one of those scams though.

 

[TheVrolok]

Yeah, it's on CNN right now.

Hmm, don't see anything on the web about it.

 

[gorcorps]

Hmm, don't see anything on the web about it.

me either, anywhere

 

[CallMeJoe]

Yes, your account has definitely been hacked. PM me all your account details and password immediately and I'll do my best to secure it for you...

 

[hclarkjr]

i just did google search, nothing current listed

 

[gorcorps]

Yes, your account has definitely been hacked. PM me all your account details and password immediately and I'll do my best to secure it for you...

:thumbsup: Thanks man! Good to know we have some nice people left on ATOT.

YHPM

 

[Paladin3]

https://www.paypal-community.com/t5...tally-confused-about-402-935-7733/td-p/250354

It seems that is a legit PayPal phone number. Can caller ID be faked?

If the caller was just asking you to go to PayPal and change your userID and/or password, I don't see the problem. It could only protect you. Or were they asking you to give them your account info?

What exactly was the scary "this and that" part of their instructions that made you think you were being scammed? Sounds like you should have followed their advice to protect your account. At least that one payment didn't go through and hopefully no others did.

 

[Miramonti]

https://www.paypal-community.com/t5...tally-confused-about-402-935-7733/td-p/250354

It seems that is a legit PayPal phone number. Can caller ID be faked?

If the caller was just asking you to go to PayPal and change your userID and/or password, I don't see the problem. It could only protect you. Or were they asking you to give them your account info?

What exactly was the scary "this and that" part of their instructions that made you think you were being scammed? Sounds like you should have followed their advice to protect your account. At least that one payment didn't go through and hopefully no others did.

Yes, very easily.

 

[Ichinisan]

Compromised accounts are almost always due to weak passwords or you having some kind of virus / keylogger / malware on a system where you've logged-in. Almost every compromised account, ever, was done so without "hacking" the server. It's really annoying when everyone with a compromised account assumes the server was hacked.

You may have used a weak password or used the same password in multiple places, or used a weak security question. If a hacker / bot gets access to your email, they can do password recovery for some of your other accounts and slowly build up personal information about you to gain access to even more of your accounts.

I'm confident that your account was actually compromised and Paypal noticed. It's in Paypal's best interest to stop the fraud ASAP, so they called you. A criminal would not want to alert you to the fact that your account had been compromised.

 

[CZroe]

Compromised accounts are almost always due to weak passwords or you having some kind of virus / keylogger / malware on a system where you've logged-in. Almost every compromised account, ever, was done so without "hacking" the server. It's really annoying when everyone with a compromised account assumes the server was hacked.

You may have used a weak password or used the same password in multiple places, or used a weak security question. If a hacker / bot gets access to your email, they can do password recovery for some of your other accounts and slowly build up personal information about you to gain access to even more of your accounts.

I'm confident that your account was actually compromised and Paypal noticed. It's in Paypal's best interest to stop the fraud ASAP, so they called you. A criminal would not want to alert you to the fact that your account had been compromised.

This. For example, if his email and password were compromised in the Gawker leak because he commented on Kotaku once, someone may have all the info they need to get into your PayPal. Granted, that was high-profile enough that PayPal likely proactively disabled any account with details matching those in the leak, but people could still be trolling the database looking for passwords that need minor tweaks to work ("Hmm... let's replace '$tR0nGpw-K' from Kotaku with '$tR0nGpw-P' and try it with the same email address at PayPal.com").

 

[edro]

i just did google search, nothing current listed

me either, anywhere

Hmm, don't see anything on the web about it.

 

[foghorn67]

Go to https://www.paypal.com
Look up the contact info and call.

Don't trust anything else.