Ebay/Paypal Obviously Have a HUGE Account Security Issue

[vendman12000]

What is the freaking deal with all of these "unauthorized use of buyer account"?  As an Ebay seller, I have had 7 sales out of a total of 34 in the last 30 days that were subsequently cancelled and I received a message from Ebay and/or Paypal that the sale had been reported by the buyer as an unauthorized use of their account.  This is a real pain in the A** for me to deal with as a seller and obviously it is way to easy for thieves to hack someone's Ebay account and make a purchase using Paypal.  If you have never had this happen, most likely you are not selling high dollar items.  It is ALWAYS something I'm selling for $150.00+.  I see from reading the forums this has been happening to many others and it has been happening for years.  You would think Ebay would have taken some serious steps to curtail this type of activity by now such as requiring two step verification etc..  This has become such a pain that I have stopped selling high dollar items on Ebay.

[slippinjimmy]

It's not so much eBay and PayPal who have the security issue. It's almost always the eBay and PayPal USERS who get phished so easily. Two step verification is available if you choose it. I can't imagine making it mandatory given how people around here react to Captcha, frequent log-ins or even a simple layout change to the login screen.

In my experience it's not really the value, it's more often the type of items that are attractive to scammers.

Unauthorized Use claims are so easy to win so they are a mild annoyance most of the time.

[3eyedfishcatcher]

For any site with personal information and banking information you really need to enable and use 2 step verification. Even if someone can figure out your login and password they still need a security code sent to your cell phone.

[cashvaluerecovery2011]

Ebay policy promotes scammers to keep trying it here. I agree its a user issue but if there was a platform reputation of being unfriendly to scammers it wouldnt be so rampant.

[equid0x]

---

@3eyedfishcatcher wrote:

For any site with personal information and banking information you really need to enable and use 2 step verification. Even if someone can figure out your login and password they still need a security code sent to your cell phone.

---

The newest thing they do is pretend they are you, call the cell provider, and have your number transferred to their new SIM card. Then, they receive your texts, which they use to access your other accounts. I knew someone this happened to. The thief only had access to their number for about 3-4 hours by the time the person realized their phone was no longer working. The thief had already made off with the entire contents of several accounts. 

With all of the data dumps that have occurred, equifax in particular, this could probably happen to anyone. 

[membersinceaug2001]

Many times on here, when paying a seller or ebay, Paypal does not sign out after payment is made.  Going directly to Paypal after paying I am already signed in from previous session.