Paypal "security measure" -is it right?

ShockingPink

Last week I had an email from Paypal saying that someone had tried to access my account, and asking me to update my details. I logged on to my account (by typing in the URL rather than through the email link!) and it said my account was temporarily restricted. All my old transactions were there, so everything seemed OK.

Anyway, I changed my password and received an email to say this had been done. Now, each time I log on, I get this message:

We are currently performing regular maintenance of our security measures. Your account has been randomly selected for this maintenance, and you will now be taken through a series of identity verification pages.

Protecting the security of your PayPal account is our primary concern, and we apologise for any inconvenience this may cause.

I'm then asked for my full credit card number. Is this above board, or has someone really managed to hack in to my account?

TIA:o

aliEnRIK

Are you absolutely SURE the address is the correct one (You might TYPE it correctly but that wont stop a redirect to a bogus one if your machines infected)

Id give them a call if I were you

DatabaseError

you been using a sniping service?

ShockingPink

DatabaseError wrote: »

you been using a sniping service?

What's that, sorry? I'm a bit of a technophobe!

kwikbreaks

It certainly sounds as dubious as hell to me so I'd second that suggestion to give them a call.

Worth trying to access PayPal from a different PC too. Your own one may have had a dodgy HOSTS file installed redirecting you to a phishing site. My betting is that you won't be able to get in because the password will have been changed.

macman

Agreed, sounds totally dubious-why do they want your cc card no? Access it from another PC ASAP.

aliEnRIK

To check for infection ~

Download MALWAREBYTES (Make sure you click 'DOWNLOAD NOW')
http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html
UPDATE and FULL SCAN
Post the log here AFTER youve deleted everything it finds


reboot

Download HIJACK THIS (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_hijackthis/
Click DO A SCAN AND SAVE A LOGFILE (Takes seconds) then post the log so we can see whats running
(do NOT do anything else with Hijack but scan and post the FULL log)

frivolous_fay

Ring PP, they'll know if it's genuine or not. Based on the fact that you logged in to your account, and the arbitraty nature of paypal's so-called security, I'm inclined to think it's genuine.

gazza1957

Pay Pal will never ask you for those details.

ShockingPink

aliEnRIK wrote: »

To check for infection ~

Download MALWAREBYTES (Make sure you click 'DOWNLOAD NOW')
http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html
UPDATE and FULL SCAN
Post the log here AFTER youve deleted everything it finds


reboot

Download HIJACK THIS (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_hijackthis/
Click DO A SCAN AND SAVE A LOGFILE (Takes seconds) then post the log so we can see whats running
(do NOT do anything else with Hijack but scan and post the FULL log)

Thanks for this; unfortunately I'm still using Windows98 (embarrassed smiley) so the Malware programme won't work (and earlier versions aren't available for download).

Also - if I do manage to do a scan, is it safe to publish the log on a public forum?

Many thanks for all your help. I'll be able to use a PC at work tomorrow anyway, so can try getting in to Paypal then and see what happens....

thomas01155

You might want to swap to something like Ubuntu if you are using win98 new version is out in 2 days cant wait to update http://www.ubuntu.com/