[WARNING] Paypal Accounts Being Stolen

[G8racingfool]

Not sure if anyone else is seeing this but I've had a couple of calls recently about Paypal accounts being straight-up hijacked/stolen. Attacker's are somehow obtaining the login credentials and then logging in and changing all of the contact info (email addresses, phone numbers, security questions, etc) but leaving the payment methods/accounts/cards in place.

This is majorly concerning as there is currently no way to get in touch with Paypal about this. Their call center is closed due to COVID and the only other way of getting support is through live chat which requires you to be logged into the account you no longer have access to.

I'm not sure how the accounts are being compromised but I know for a fact at least one of the people I've worked with on this was using a complex and unique password for their account and had changed it 2 weeks before the account was breached.

If you have/use a Paypal account I would definitely keep an eye on it and make sure 2FA is enabled (obvious but it's worth repeating).

 

[Porthos]

Paypal accounts being straight-up hijacked/stolen. Attacker's are somehow obtaining the login credentials and then logging in and changing all of the contact info (email addresses, phone numbers, security questions, etc) but leaving the payment methods/accounts/cards in place.

They were probably phished at one time.

 

[phaZed]

Thanks for this.... I found an issue on my account - not that it was hacked though...

I have a Paypal Business account and there are no options for 2FA! Did a search in help and it directs to Braintree Control Panel to do the 2FA... well, Braintree doesn't recognize the paypal account... So, thanks for reminding me... and now I gotta futz around to try to get Paypal to 2FA me!

 

[phaZed]

Oh, well, nevermind.. did an online chat with Paypal (That was fast!) and my old development account was mucking with my business account. They fixed the issue in 30 seconds and my Business account dashboard 2FA option appeared. 2FA enabled!

 

[HCHTech]

With apologies to Allie Brosh: 2FA all the things!!!

 

[Markverhyden]

Had no problem finding 2FA. Login, click on your name in the upper right, Profile Settings

 

[G8racingfool]

They were probably phished at one time.

Most likely yes. Still something to keep an eye on and make sure your customers/clients are aware of. If anything it's a legitimate reason to hammer home that 2FA/password security nail. (as well as phishing education for your business clients)