Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [paypal]

An American company operating a worldwide online payments system.

2
votes
0answers
79 views

Random PayPal 2FA Codes [duplicate]

I sent an email out to PayPal a few weeks ago, and no response to my question, so I've decided to bring it to the Community for help (as the issue has occurred just 30 minutes ago) So, I'd say maybe ...
1
vote
0answers
41 views

Automatic Paypal payment through API

I am building a game similar to HQ trivia, that when someone gives all the correct answers at the end of the game he or she gets money sent to their Paypal account, my concern is obviously security. ...
1
vote
2answers
110 views

E-commerce website that uses plaintext HTTP but redirects to PayPal during checkout

I need to purchase a few items (t-shirts, dvds, etc.) on an old e-commerce website that hasn't been updated in a while and doesn't use HTTPS to encrypt data in transit. The website does not have any ...
1
vote
0answers
26 views

Is the PayPal live client id through the API to pass is secure?

I have the PayPal development in my project. In the frontend, I use: // data ... credentials: { sandbox: this.PAYPAL_SANDBOX_CLIENT_ID, production: this.PAYMENT....
2
votes
2answers
3k views

Is Paypal's 2FA Security really this bad? [closed]

I'm by now means an expert in this field, or even well versed, but if it's possible to do this, I can't comprehend how Paypal allows it. Say you have 2 factor authentication on, with your phone setup ...
3
votes
0answers
252 views

Paypal payments redirecting to fraudulent URL [closed]

At my place of work, our paypal appeared to have been compromised so that a clone of paypal would appear and ask for customer credentials. The url it directed to was https://checkoutnow.mdigo.com/...
9
votes
1answer
2k views

Why would PayPal send messages from another domain?

I have just received a message asking to consent to PayPal policy updates from the domain: https://epl.paypal-communication.com The actual link is full of trackers. Given the domain name, it sounds ...
1
vote
3answers
298 views

Is this PayPal e-mail a scam? [closed]

I just received this e-mail (where the blacked out parts are my e-mail address): To me it looks like a scam for the following reasons: First of all, I do not have a Paypal account. It is written in ...
3
votes
3answers
228 views

Remaining private while using Paypal

I am starting a new website and would like to protect my privacy. I am thinking about using a Paypal account to purchase my domain and hosting, as well as for monetization further on. How easy is it ...
2
votes
2answers
9k views

Got a paypal confirmation code when I don't even have an account? [closed]

Basically just right now I got a text on my phone giving me a code that expires in 5 minutes. The scary thing is that I've never used paypal ever in my life. Is this just someone mistyping his phone ...
6
votes
2answers
679 views

PayPal payment reversal; scammer at work?

For the past several days, I have received several monetary donations through PayPal for exactly 1 US dollar. Several hours after the donation is received, I also receive a notification from PayPal ...
0
votes
2answers
88 views

What is going on with people trying to open Paypal accounts under my domain

Say our domain is contoso.com. We have our email set up so if anybody typos an email address it lands at support@contoso.com. So if you email anybody in the firm but get the email address wrong it ...
0
votes
2answers
877 views

PayPal Scam Email?

Is this a scam email or is it a valid email from PayPal? To: XXXXXX XXXXXX From: PayPal Credit Request attempted on: June 10, 2017 You attempted to open an account or make a purchase using ...
0
votes
0answers
79 views

Plausible PayPal phishing… with no evidence credentials were stolen

Yesterday my housemate was almost scammed by someone on the internet, or so I thought. She was selling some goods on a ebay-like website, and someone contacted her to buy her stuff. She then received ...
3
votes
2answers
116 views

Is a donate button on a http only site insecure?

I want to put a PayPal donate button on my web page, at the moment it doesn't have https (I'm working on it...) Would this be insecure for the people donating or for me?
1
vote
1answer
109 views

Secure Hidden Inputs in Paypal

I'm trying to create a system that accepts payments thru Paypal. I've managed to create one using a sandbox account. The process of the system is that they will select a product (coming from my ...
0
votes
1answer
333 views

Cost of PCI DSS Compliance (SAQ A)

I'm having a hard time figuring out / finding answers to determining the cost of becoming PCI DSS compliant for SAQ A. The system will use PayPal Express Checkout. This means that it should be ...
0
votes
1answer
101 views

Can hackers steal money from my PayPal if a web shop is compromised?

Say if I were to purchase something on somewebsite.com using PayPal. If somewebsite.com was compromised, what are the chances of my PayPal account being hacked compared to before the breach?
0
votes
2answers
490 views

Shortening PayPal url

I am currently sending very long PayPal url's to customers which sometimes leads to a line-break and makes it unclickable, whenever the customer can't receive HTML emails. I am thinking of using a ...
-6
votes
3answers
202 views

Is collecting credit card information the only intention of hackers? [closed]

We are doing a PHP project with simple user signup, sign-in, and account page. We are also collecting PayPal, email id, bank account name, and account number to pay money for them. I read a lot of ...
0
votes
1answer
1k views

Fake PayPal email with (presumably) malicious JS code

I'm asking this question out of curiosity; I haven't fallen victim to this, I'm just interested in what it does. Today I have received an email from the "Paypal Security Team": Dear Client, ...
8
votes
4answers
614 views

How can I protect my credit card on sites where 2FA is not an option?

I'm using Visa Express, and sometimes when I'm shopping, the store doesn't support Verified by Visa - so that means that there is no 2FA option. Normally when there is that option, it will force me ...
0
votes
1answer
701 views

Is it safe to login to PayPal in apps [duplicate]

How is it safe to use PayPal in an app where the app itself presents the PayPal login prompting email and password? How does PayPal even accept this risk? As an example, the coffee ordering app "Hey ...
1
vote
0answers
336 views

Unusual activity on the site - fake account and checkout probe from Paypal employee

I was a bit confused when my webmaster sent some of the latest access logs, and we found that someone from Paypals IP address 185.97.82.87 and URL like this: https://admin.paypal.com/cgi-bin/admin?...
7
votes
1answer
5k views

PayPal is asking for my Bank Details. How secure is this? [closed]

I am from the UK but I'm living in Poland. I have two British bank accounts and a Polish account. The two British accounts are linked to a PayPal account registered from the UK and the Polish one is ...
8
votes
2answers
636 views

Is PCI-DSS Compliance Required with PayPal Donate/Payment Buttons on Websites?

Reading about PCI-DSS 3 recently: Would like confirmation what I am interpreting here - you need PCI-DSS SAQ-A to have credit card associated payment or donation URL links on a merchant's website? ...
0
votes
1answer
384 views

safe money transfer on open wifi VS vpn not allowed

sometimes I need to do money transfer on my windows tablet when I'm connected to an open wifi, but I noticed that some of them don't allow VPN services. This scares me, since I'm worried about ...
3
votes
1answer
230 views

What do Paypal protected buttons defend against?

Paypal says that protected payment buttons are more secure as they cannot be altered by malicious third parties. I'm trying to figure out what they are supposed to protect against. If the attacker has ...
4
votes
2answers
3k views

Do I need PCI DSS compliance when using PayPal Express Checkout?

If I'm using PayPal Express Checkout on my website, am I required to be PCI DSS compliant? PayPal says "With Website Payments Standard, Online Invoicing, Express Checkout and Website Payments Pro ...
7
votes
2answers
1k views

Why would someone keep sending money to my Paypal account without my consent?

I don't know why someone keeps sending money to my Paypal account, repeatedly at a certain interval. What would be the benefit from doing this? What would be the security scenario in maliciously ...
3
votes
2answers
8k views

Does Visa Checkout have preventive measures against spoofing?

A few online merchants are offering special deals for using Visa Checkout, a payment service similar to PayPal, so I've been trying to learn something about it before signing up. When you are on a ...
3
votes
1answer
385 views

Is it ok from the viewpoint of PCI DSS to send credit card info to my own server which then directly sends it to PayPal?

Currently I'm developing an iOS application which has an option to pay an order (clothes cleaning) via scanning credit card info using device camera. I can't use Apple In-App Purchases (IAP) for this, ...
4
votes
2answers
4k views

Is it safe to give my PayPal email and Home Address to a stranger? [closed]

I am selling some fairly expensive furniture on CraigsList. A few hours after posting, I received an offer. They said to send them my PayPal email and the address so that movers could come pick it ...
13
votes
1answer
3k views

PayPal encrypted with obsolete cryptography

My Chrome just complained from PayPal's security, similarly to this issue: Google Chrome "Your connection to website is encrypted with obsolete cryptography" The identity is verified, but ...
-4
votes
1answer
427 views

How does Paypal validate the transaction amount?

How does Paypal validate the transaction amount if the buyer changed the purchase amount using http parameter tampering attack?
2
votes
1answer
393 views

Email phishing scam asking customers for card details

I work for a small ecommerce company and over the weekend we received a few emails from customers claiming to have received an email asking them to confirm their card details to process their orders. ...
6
votes
1answer
1k views

PCI Compliance and PayPal

First, please forgive my ignorance. Until this week, the only "credit card security" I understood was how to hack systems and why to write PHP pages with the types of features I do (msqli, pdo, ...
14
votes
2answers
3k views

Should I change phone number and e-mail address after PayPal fraud?

I have been the victim of PayPal fraud. I hadn't used PayPal in a year and then within 9 days there were three unauthorized transactions on my account for a total of 150 Canadian dollars and 290 ...
0
votes
1answer
270 views

Is the following PayPal Vulnerability a design/implementation flaw?

I am trying to understand the logic behind following vulnerability, I believe this a design flaw not only an implementation. To me the problem with the two-factor authentication service at PayPal is ...