PayPal is a digital payments platform whose account security, fraud controls, vulnerabilities, and breach disclosures can affect online transactions.
Search across headline titles and summaries.
Background for this topic.
PayPal is an online payment platform for consumer accounts, merchant checkout, money transfers, and payment-processing integrations. Its ecosystem includes web and mobile applications, APIs, account-funding methods, and merchant webhooks, so security news may concern PayPal services, connected applications, or the handling of payment and identity data.
The main security concerns are account takeover through phishing, credential reuse, or stolen session data; fraudulent payments and unauthorized transfers; and weaknesses in merchant integrations that mishandle API credentials or fail to verify webhook messages. Defenders should use available multifactor authentication, protect API secrets, validate transaction state server-side, and monitor unusual account and payment activity. Vulnerability advisories affecting PayPal software or integrated systems require prompt assessment, while suspected fraud or compromise calls for preserving transaction records, securing the account, and following PayPal’s reporting and recovery procedures. Privacy and payment-security obligations also depend on what personal and card data a merchant stores or transmits.
Weekly headline count for the current query.
About 100 customers affected PayPal has notified about 100 customers that their personal information was exposed online during a code change gone awry, and in a few of these cases, people saw unauthorized transactions on their accounts.…
US payments platform back in action, says it's informing affected customers Shoppers and merchants in Germany found themselves dealing with billions of euros in frozen transactions this week, thanks to an apparent failure in PayPal's fraud-detection systems.…
Don’t trust mystery digits popping up in your search bar Scammers are hijacking the search results of people needing 24/7 support from Apple, Bank of America, Facebook, HP, Microsoft, Netflix, and PayPal in an attempt to trick victims into handing over personal or financial info, according to Malwarebytes senior director of research Jérôme Segura.…
Researchers find it's possible to downgrade authentication checks, and shabby token refresh policies Digital wallets like Apple Pay, Google Pay, and PayPal can be used to conduct transactions using stolen and cancelled payment cards, according to academic security researchers.…
But criminals posing as Microsoft workers scored the most ill-gotten gains The Federal Trade Commission (FTC) has shared data on the most impersonated companies in 2023, which include Best Buy, Amazon, and PayPal in the top three.…
Nearly anything can look like money laundering if you squint hard enough Three supporters of activists against a $90 million police training facility dubbed Cop City were arrested after the cops used PayPal data to bring money-laundering charges against the trio.…
That passwordless option is looking really good right about now The personal information of 35,000 PayPal users was exposed in December, according to a notification letter sent to the online payment company's customers this week.…
No more reusing, recycling passwords PayPal has added passkeys for passwordless login to accounts across Apple devices.…
Samsung and TSMC hit with chip tech patent suit; Ant Group's DB hits AWS; PayPal drops Hong Kong rights group; and more Asia In Brief Chinese president Xi Jinping has opened the 20th Congress of the Chinese Communist Party with a call for the nation he leads to win the race for development of “core technologies” and to become self-reliant in strategic tech.…