Online security tips - Paypal - Virtual Assistant Forums

AnnaLisa Michalski · #1 (**permalink**) 01-25-2008

Happy Friday, everyone!

I'm not sure this is the right category to post this, but...here goes anyway.

I read a blog post this morning written by a person who lost a chunk of money when her PayPal account was hacked.

I am a PayPal user, and I've never been displeased with the service. Passing on a rant is NOT my purpose. But I felt this post was worth sharing as a cautionary tale--and because, if you read the comments after, there are some REALLY GOOD security tips listed. So many of us use PayPal (not to mention a hundred other online services) and could benefit from a reminder about security measures.

Here's the post.

equipbiz · #2 (**permalink**) 01-25-2008

Anything that promotes online security - tips etc., is always worth posting about!

I had a hacker send me a FAKE message from PayPal already ... I forget the exact details now but it was something about having a payment to accept and verifying my account/password details. PayPal, on their site somewhere, actually say they will NEVER email you about such things and if contact is made they use a certain method of identifying themselves (info only they could know). I spotted it straight away as a suspect mail and I forwarded it on to PayPal to look into. Once again they have a special email address which you use to send on these type of messages and they confirmed straight away that it was indeed a Phishing message designed to hack into my details.

Some of the security tips PayPal suggest is to set up a password with both lowercase and uppercase alpha-digits and to include some numerics. This apparently makes it much more difficult for hackers. And, obviously using any 'obvious' password is not at all advised.

Thankfully the hackers never got at my account so I was ok. I use PayPal a lot for business so I am always ultra vigilant.

Great topic for a post - I'm sure others will have even more tips and advice to help us all improve our technique.

Modern Marketing Support · #3 (**permalink**) 02-01-2008

Wow. thanks so much for posting this AnnaLisa.

Tess · #4 (**permalink**) 02-01-2008

AnnaLisa, great post - and definitely something to think about.

One way you can tell if an email is a fake is if there is ANY variation in the link provided when you mouse over it. Often times the link will be something completely unrelated to the Paypal URL. Other times the URL will be an odd mix with 'paypal.com' in there somewhere - remember that anyone can write an email and *make a link look valid*.

I get the Paypal fraud emails at least once a month - mousing over the links usually gives me the immediate info I need to drop them in the trash.

Modern Marketing Support · #5 (**permalink**) 02-01-2008

Tess, is it possible for hackers to hack in to PayPal even though a phishing email has never been sent? How do they actually hack? How often should we be changing our passwords and is that secure enough?

Sorry for all the questions but it is something I would like to know.

Thanks!

Tess · #6 (**permalink**) 02-01-2008

These are all good questions - you know, truthfully, I don't know how they do it exactly - there are a few ways one of which involves software that tries endless combinations of logins, another is stealing keystrokes (like at a public computer), or hacking into your email. These emails I was referring to just get you to click a bogus link and then records your info so they can access your account later.

I change my passwords every couple of months and I *never* use the same password on all of my access accounts at the same time. Another thing I will change from time to time is the primary email on record. I do this with my bank, with Paypal, and any other account that maintains my financial info (like our servers or Amazon Web Services which bill me automatically every month).

The thing about any emails from your bank or Paypal, eBay, etc. is to NEVER click the links-instead, just open a new browser window and type in the URL manually, then log in - you'll be able to see if whatever the email reported is actually true relative to your account status once you're in and you've avoided clicking a potentially dangerous link.

Modern Marketing Support · #7 (**permalink**) 02-01-2008

Thank you Tess. I feel safer already. I do not change my primary email address from time to time as you do. But, it is something I will do from now on.

lisa007 · #8 (**permalink**) 02-01-2008

OMG change your emails?? I didn't know this. Do you create new email accounts each time? how do you keep up with all these? I don't do much right now, but as I grow, I'm concerned about it now. Thanks

Blessings,
Lisa007

Tess · #9 (**permalink**) 02-01-2008

I just switch out the primary email address every few months, alternate between two or three - if you have your own domain you should be able to set up more than one email, or you could always use gmail or similar I suppose.
It's just something extra I do - I don't have any proof or reason to believe it makes a difference, but it helps me feel like I'm staying on top of security issues.

lisa007 · #10 (**permalink**) 02-01-2008

Oh I see. Yes I have my own domian, but only setup one email for now. Maybe I'll setup a few more. Never hurts to be too careful these days. Ya never know what can happen!
Thanks Tess!

#11 (**permalink**) 03-03-2008

Thanks for that info, I often get scam emails saying they are from paypal. I almost clicked on the link the other day.

Sandra

sfsupport · #12 (**permalink**) 03-03-2008

The security key they offer is also a good thing to utilize, $5 and you can use it on ebay as well I believe. It's small enough to keep on a keychain so you can use it while away from your regular computer too.

Tess · #13 (**permalink**) 03-03-2008

I had no idea what the reference to a Paypal security key (for the keychain no less) meant so I had to look it up, and sure enough, voila!

From the Paypal site:
"What is it?
It’s a device that generates a temporary 6-digit security code every 30 seconds. Use it every time you log in for added security."

Very interesting! Thanks for bringing that up!