Your paypal account could be easily stolen by your friends , did u know ?

Monday, May 12, 2008

I decided to check the security of my paypal account and started doing everything to recover my password by some of the means which are available in paypal.When i did so , i gave forgot password option.Let us assume that i know the email id of some other person whose password I'm trying to get.So i type the email id and proceed to next step.which is shown below ,
Then we proceed to next step , It asks us to confirm the account by any of the three means , which are through
1.phone number
2.address
3.email

And you choose phone number option it asks the phone number which you gave at the time of registration. The irony is that it asks the phone number and gives you the last 2 digits.Obviously your friend might be knowing your phone no.





so if he gives it right then he can end up in creating a new password and transfer it to his friend's account whom you don't know and then to his account.finally he'll land in this page
So what can be done to avoid these kinds of password stealing ?
Ans:
1.Don't let your email know to anyone .
2.use a dummy account to transfer account from your account to your friends account.And don't have any balance in that dummy account
3.Don't give correct phone number which you are using or know to your friend, give a imaginary number which you know and make it like a password.

you might ask that if he resets the password then you'll get a password reset alert to your email , but don't forget that it'll take only few minutes to transfer money from one paypal account to the other.

Disclaimer:This post was mainly to help my friends and keeping their account safe.If anyone indulges in using this post for retriving passwords or any illegal activities then will be sutitably punished under law.

13 comments:

Anonymous said...

Really a nice post. But don't forget you might be teaching someone on how to hack paypal password :)

And anyways we can know to whom the money has been transfered and i know it will be too late and also no use of finding after the money is been transfered.

Moreover i think our friends won't do it to us.

but overall you told me something which i don't know.

I wonder how you found this. Cool.

Anonymous said...

Even i have a doubt. When paypal password is changed , a mail comes to our inbox. I think there is some link we have to press to confirm the change in password which goes to login page and we have to login there.

Also there is another link to report that we didn't change password.

I'm not sure, cos i've changed my password long back. i don remember properly.

But i don't think paypal is that much insecure. Strange that we could easily.

I checked now i think we cannot change password as you told. The password will be send to our mail only. Those three questions were just to verify whether you are owner. Though i have not checked it fully, im telling from what i've read.

Anyways thanks for alerting.

Anonymous said...

hey i did it thoroughly and did it da , i discovered it when i lost my own password and its true that a mail comes to your inbox but , it states that your password has been changed.And you can easily set a new password after doing this .I changed mine da...i mean i retrived da...

Anonymous said...

hey just you yourself and check your account security and tell da , if there are any changes i'll accept it and edit my post or even delete it if there are any mistakes in it.

Anonymous said...

""Dear MEYYAPPAN RM,

This email confirms that you created a new password for your PayPal account on 16-May-2008.

If you didn’t make this change, please contact us at +1-402-935-7733.

Thank you.

Sincerely,
PayPal


Security Advisory: When you log in to your PayPal account, be sure to open up a new web browser (e.g. Internet Explorer or Netscape) and type in the PayPal URL to make sure you are on the real PayPal website.
For more information on protecting yourself from fraud, please review the Security Tips in our Security Center.

Please do not reply to this email. This mailbox is not monitored and you will not receive a response. For assistance, log in to your PayPal account and click the Help link located in the top right corner of any PayPal page.

----------------------------------------------------------------
Copyright © 1999-2008 PayPal. All rights reserved.

Consumer advisory- PayPal Pte. Ltd., the holder of PayPal’s stored value
facility, does not require the approval of the Monetary Authority of Singapore.
Users are advised to read the terms and conditions carefully.

PayPal Email ID PP1263 ""


This is the mail which i received after changing the password .
1 possible thing is to call to their office and inform them , but it's better to be safe than getting hacked.

Anonymous said...

Hmmm, as i told before i was not sure and even i said thanks for alerting. Same again.

Don't delete this and let everyone get alerted. No matter if it is true or not. now they will know importance about this.

Anonymous said...

sure da , i'll not delete this post.thanks for the compliment hari.

Anonymous said...

Hello Meyya,

Did you ever get a solution to this problem?

Frank.

Anonymous said...

Hey thats my paypal account dude!!
i also know you...
and thats not legal what you did.Be careful when you hack into someones account and be proud of what you did ..you may end up in prison which will not be tough to explain

Anonymous said...

Good day !.
You re, I guess , perhaps very interested to know how one can reach 2000 per day of income .
There is no initial capital needed You may begin earning with as small sum of money as 20-100 dollars.

AimTrust is what you need
The company represents an offshore structure with advanced asset management technologies in production and delivery of pipes for oil and gas.

Its head office is in Panama with offices around the world.
Do you want to become an affluent person?
That`s your chance That`s what you really need!

I feel good, I started to take up income with the help of this company,
and I invite you to do the same. It`s all about how to select a proper partner who uses your funds in a right way - that`s AimTrust!.
I earn US$2,000 per day, and what I started with was a funny sum of 500 bucks!
It`s easy to join , just click this link http://cifizowe.jamminweb.com/mahokod.html
and go! Let`s take this option together to feel the smell of real money

Anonymous said...

Good day !.
You may , perhaps curious to know how one can reach 2000 per day of income .
There is no need to invest much at first. You may commense to receive yields with as small sum of money as 20-100 dollars.

AimTrust is what you thought of all the time
AimTrust incorporates an offshore structure with advanced asset management technologies in production and delivery of pipes for oil and gas.

It is based in Panama with structures around the world.
Do you want to become really rich in short time?
That`s your chance That`s what you really need!

I feel good, I started to get income with the help of this company,
and I invite you to do the same. It`s all about how to choose a proper partner utilizes your funds in a right way - that`s it!.
I take now up to 2G every day, and what I started with was a funny sum of 500 bucks!
It`s easy to start , just click this link http://emakodev.maddsites.com/rocozy.html
and go! Let`s take our chance together to feel the smell of real money

Anonymous said...

Brim over I agree but I dream the brief should acquire more info then it has.

Anonymous said...

::Paypal Limitation Remover::

http://i41.tinypic.com/6564a9.png
http://i39.tinypic.com/242zziu.png

Download ::
http://hotfile.com/dl/32700619/daf2d86/PayPal_Exploiter_v2.2.rar.html
Enjoy ... ;)