I just got a notice from Paypal advising me that they think my account has been breached by a 3rd party. I logged in yesterday to take care of a couple of odds and ends, and was notified that I'd been selected for "random" screening. I updated my password, updated my email and phone records, great, no problem. I made a couple of routine purchases, made a small donation ($5) to support a musician doing some fund raising, and called it a day.
Today I got said notice in my email saying that my account had been violated. I was all set to dismiss it as phishing mail, but there was no URL to any sort of scam site. I went to PayPal.com directly, logged in, and sure enough... I was asked to update my password again. After jumping through all of their hoops, I verified that there hadn't been any suspicious activity (and of course there hadn't), and the only thing I can come up with is that they freaked out because I logged in from behind a Canadian host mask (I'm staying with my girlfriend up in Ontario). I assumed at that point I was fine, but no, it's Paypal, it can never be that easy.
The last step I had to go through to reopen my account was confirming my address. I had to pick the number I wanted them to call from my list of numbers (home/work/cell), and then I got an automated call which asked me to enter a pin number they'd just emailed me. I had no idea how that was supposed to prove anything, but it turns out that they were just checking my phone number against the white pages to see if it matched my address. I have an unlisted number, so there wasn't a match. Paypal isn't going to let me use my account again until I verify my home address (for some unknown reason, my email address, bank account, credit card, and phone numbers all check out fine), and to do that, I have to follow some instructions they're sending me via snail mail in... three weeks.
Meanwhile, I'm completely locked out of doing business on eBay at Christmas
when I'm getting ready to do a lot of my gift shopping (including for my secret santa
), and I have no way to pay a couple of the freelancers who do work for me.
The plan is to call them first thing Monday morning so that I can hopefully get them to restore my account, but I'm not really sure what to say. In their automated emails, they implied that I have no recourse but to go along with their "wait three weeks for our letter" plan, but that just isn't acceptable. Has anyone had to deal with this before? Can I expect any help from them in getting this resolved, or do I need to just tell my friends and family to expect their presents in January?
BTW, I got a message from Obs that equated installing OS X on a PC with car theft, murder and rape. Is he normally like that?