Quote:
Originally Posted by fumanchu1
There is almost no way he can have accessed your paypal/card info unless you gave it to him directly or indirectly. did you by any chance follow a link he had sent you to make the payment? Is the paypal page you paid from legit (maybe received an emailed invoice stating it was paypal but did it actually lead you to paypal.com or another site) Is your password easily guessed (like if you are named john and your password is john123 or something like baseball). I used to work in credit card fraud so I know how this goes.
Several things are possible:
Before I even begin did you recently use your card for anything like automotive services or parts (a lot of times a shop may not have the same banking name as their actual shop name)
(btw is the credit card from your paypal account the same one that got defrauded with the car shop payment)
1. you have non secure passwords that are very commonly used/guessed (baseball, 1234, etc.) or you provided him your information either knowingly or unknowingly (using link he provided to make payment, hinting at your possible password).
2. you provided him the card number directly and also gave him the expiry date and security code on the back(hope you didn't actually do that)
3. Coincidentally you happen to have your card cloned and defrauded at the same time that this happened with the guy (did you shop for anything on Black Friday, store often get hacked on big holidays and credit card numbers are stolen in bulk (Winners/Homesense; Target, WM, etc.)
In any case, I would recommend you contact both paypal and your credit card company they will be able to track how the payment was made(whether was made through internet or in store with the actual card present). If you really think someone may have a lot of your personal information, I also recommend contacting your credit bureau to ensure that no changes to your personal info has been made or any new credit cards fraudulently opened.
here is just one of the many examples of fake email invoices (this one is a terrible one but some look very legit):
 |
This, this, and so much this! E-mails can be made to look very legit and may sometimes bring up a non-existent issue that you may have. Even some go as far as to target a specific individual.
The best practice to go about this is to instead type in the official URL of a website instead of clicking on the link in the e-mail. If you must, however, at least pay attention to the bottom-left corner of the screen to see the true URL.
Phishing scams are a big issue with e-mails, as well as ransomware, which is getting even more dangerous now that crooks are getting wise on how people bypass the ransomware now.