FROM http://www.paypalsucks.com/forums/sh...29&old_block=0
-----------------------------------------------------------------------------------
Pay-Pal; an ex-managers story/ observations
I was a "middle management type" with Pay-Pal until leaving recently- partally due to my disgust over their internal security policies which have led to the mountain of complaints seen on this and other similar boards. There aren't many PP whistleblowers; during your "exit interview" a soon-to-be-former manager is warned, intimidated and threatened against doing the very thing I'm doing right now. But since I left to start my own business, there's not a thing they can do to me.
Pay-Pal DID start as an honest, legitimate company with an innovative service concept. However, in my opinion, this concept can never actually WORK in the real world because there are legions of scammers all over the globe with reams of stolen credit card info and identifications just WAITING to swoop down on any new "payment service" like this that comes along. Credit-card transactions where the "card is not present" and thus personally examined by a clerk account for the overwhelming majority of fraud transactions. Comparitavely, there's very LITTLE credit card fraud at Wal-Mart, because the cashier actually sees both you and the card- and can ask for supporting identification at the point of sale. Unfortunatly, the high-risk, "card not present" transactions are the ONLY kind of transaction a company like PP can do, and boy- did the con artists find them in a hurry! The basic con was (and is) to use stolen identification information to open new PP accounts, funnel money into them with stolen credit card numbers, then transfer the money OUT of the account before PP gets the charge-back and can freeze it. Unfortunately, despite PP's claims of having a "tough anti-fraud program", these people are mostly impossible to catch, because when opening a new PP account, they DO have all the proper-appearing ID information (which was stolen or conned out of unsuspecting individuals, most of whom have never HEARD of Pay-Pal). When fraud is uncovered and the account is checked out, the perp is almost never caught, since it was almost always opened under a stolen identity, and he's long abandoned the mail-drop.
Yes, the application process COULD be made more stringent, but it is felt (probably correctly) that a brand-new customer would certainly balk at doing things like sending in notorized copies of their driver's licence and so forth. So an "alternate strategy" for offsetting the charge-back losses slowly evolved at PP. It's the perfect scheme really; since PP can't usually catch the scammers and dosen't want to loose customer base by making things more stringent to start with- they decided to simply re-coup their chargebacks from the pockets (and accounts) of good, solid people under the easily-defensible and impossible-to-criticize guize of "Fraud Prevention and Enforcement".. Simply put, if you're a seller and somebody pays you with a stolen credit card, you're targeted by PP security and might very well have your account siezed, "investigated", closed- and the money retained by PP. (Yes... they simply "add" it to their revenues and spend it like any other income. You basically gave them permission to do this under the "terms and conditions" you originally agreed to. No, I KNOW you didn't really read it, but I bet you will the next time!). Even if the person paying you has NOT used a stolen credit card, he could have been been flagged by PP as "somebody to keep an eye on" for any one of numerous reasons. If he does business with YOU, especially multiple times- you're frozen. OCCASIONALLY some lucky soul will complain about the siezure, and when the case is "investigated" by PP he is "cleared" and the money unfrozen. This good fortune has nothing to do with an actual "investigation" (there aren't any, really). Pay-Pal WILL unfreeze a small percentage of the accounts (as a future defense against a potential class action), so you MAY benefit from a simple luck of the draw. See, if it ever comes down to a massive class-action lawsuit, or even testimony before the SEC or other regulatory body, PP wants to be able to stand up in court and say "But your honor, we DON'T just freeze accounts and pocket the money. We really DO perform a painstaking investigation. Here's the proof... look at all these people who WERE suspected, but were then cleared by our "crack security staff"! If this was really a scam, why would we have given all of THIS this money back?"
I'm amused by the posts that say, "But I've been a good customer of PP since the beginning and have paid thousands in fees.... why would they have done this to ME?" Let me answer that with a hypothetical question: If you were an unregulated financial services company so embittered by fraud losses that you, yourself, had completely lost whatever moral compass you might have once possessed, what would YOU rather have: a happy, content customer whos business might account for $5000 worth of fees over the next 10 years, or a person who's pissed off and will NEVER do business with you again, BUT you've got his $5000 up-front, TODAY- siezed directly out of his account with no appeal possible. Believe me, it's a no-brainer to these people. They have sort of developed a wierd corporate mindset wherein their past (and ongoing) victomization at the hands of con-artists somehow gives them license to "pass it along" to others. Think the E-Bay purchase will make it all better? Guess again. If ANY company knows the reality of on-line schermes and scams, it's E-Bay. While they certainly know that a nice chunk of their fees come from people who ultimately turn out to be thieves (but hey... their money is just as green as that of the honest folks) do you think E-Bay wants to open THEMSELVES (or a subsidary company) up to the same risks as their bidders are exposed to? No way.
On another issue, I see lots of complaints from those who have BOUGHT things and paid through PP who find their credit cards suddenly drained and/ or billed multiple times for the same transaction. The answer is simple; PP has very lax hiring procedures, ESPECIALLY compared to the standards any bank would impose on anybody employed in a similar position of trust. But don't forget- PP ISN'T a bank, so they feel no obligation to hire (and, of course, compensate) people as if they were. Unlike the "account freezing" thing, the scams pulled on buyer's credit cards aren't a part of any "master plan" by the company, but simply the work of some dishonest employees who nonetheless have access to ALL of a customer's personal information. Yes, it's scary. Schemes are rampent where a PP employee has a cousin or friend set up an account to receive payments in another name. Since it's an "inside job", these "phantoms" will, of course, sail through the PP application process with flying colors- even if all of the infomation was simply "made up". Then your easily-accessable credit card number is used as payment for phony "auctions" and so forth done through the phantom account. The PP employee who actually approves this transaction might very be the one running the scheme! Given their system and the way the computers are networked together, this is pretty simple for almost any employee to do. Even if you DON'T have access to the PP customer database, you almost certainly have lunch in the break room or visit at the water cooler with someone who does. Many people have been quietly terminated for this (rarely, if ever prosecuted- since this would be a huge black eye for the company), and in reality, THIS is where the majority of PP security and investigative resources go: to policing their shoddily-selected workforce.
......to be continued next post
-----------------------------------------------------------------------------------
Pay-Pal; an ex-managers story/ observations
I was a "middle management type" with Pay-Pal until leaving recently- partally due to my disgust over their internal security policies which have led to the mountain of complaints seen on this and other similar boards. There aren't many PP whistleblowers; during your "exit interview" a soon-to-be-former manager is warned, intimidated and threatened against doing the very thing I'm doing right now. But since I left to start my own business, there's not a thing they can do to me.
Pay-Pal DID start as an honest, legitimate company with an innovative service concept. However, in my opinion, this concept can never actually WORK in the real world because there are legions of scammers all over the globe with reams of stolen credit card info and identifications just WAITING to swoop down on any new "payment service" like this that comes along. Credit-card transactions where the "card is not present" and thus personally examined by a clerk account for the overwhelming majority of fraud transactions. Comparitavely, there's very LITTLE credit card fraud at Wal-Mart, because the cashier actually sees both you and the card- and can ask for supporting identification at the point of sale. Unfortunatly, the high-risk, "card not present" transactions are the ONLY kind of transaction a company like PP can do, and boy- did the con artists find them in a hurry! The basic con was (and is) to use stolen identification information to open new PP accounts, funnel money into them with stolen credit card numbers, then transfer the money OUT of the account before PP gets the charge-back and can freeze it. Unfortunately, despite PP's claims of having a "tough anti-fraud program", these people are mostly impossible to catch, because when opening a new PP account, they DO have all the proper-appearing ID information (which was stolen or conned out of unsuspecting individuals, most of whom have never HEARD of Pay-Pal). When fraud is uncovered and the account is checked out, the perp is almost never caught, since it was almost always opened under a stolen identity, and he's long abandoned the mail-drop.
Yes, the application process COULD be made more stringent, but it is felt (probably correctly) that a brand-new customer would certainly balk at doing things like sending in notorized copies of their driver's licence and so forth. So an "alternate strategy" for offsetting the charge-back losses slowly evolved at PP. It's the perfect scheme really; since PP can't usually catch the scammers and dosen't want to loose customer base by making things more stringent to start with- they decided to simply re-coup their chargebacks from the pockets (and accounts) of good, solid people under the easily-defensible and impossible-to-criticize guize of "Fraud Prevention and Enforcement".. Simply put, if you're a seller and somebody pays you with a stolen credit card, you're targeted by PP security and might very well have your account siezed, "investigated", closed- and the money retained by PP. (Yes... they simply "add" it to their revenues and spend it like any other income. You basically gave them permission to do this under the "terms and conditions" you originally agreed to. No, I KNOW you didn't really read it, but I bet you will the next time!). Even if the person paying you has NOT used a stolen credit card, he could have been been flagged by PP as "somebody to keep an eye on" for any one of numerous reasons. If he does business with YOU, especially multiple times- you're frozen. OCCASIONALLY some lucky soul will complain about the siezure, and when the case is "investigated" by PP he is "cleared" and the money unfrozen. This good fortune has nothing to do with an actual "investigation" (there aren't any, really). Pay-Pal WILL unfreeze a small percentage of the accounts (as a future defense against a potential class action), so you MAY benefit from a simple luck of the draw. See, if it ever comes down to a massive class-action lawsuit, or even testimony before the SEC or other regulatory body, PP wants to be able to stand up in court and say "But your honor, we DON'T just freeze accounts and pocket the money. We really DO perform a painstaking investigation. Here's the proof... look at all these people who WERE suspected, but were then cleared by our "crack security staff"! If this was really a scam, why would we have given all of THIS this money back?"
I'm amused by the posts that say, "But I've been a good customer of PP since the beginning and have paid thousands in fees.... why would they have done this to ME?" Let me answer that with a hypothetical question: If you were an unregulated financial services company so embittered by fraud losses that you, yourself, had completely lost whatever moral compass you might have once possessed, what would YOU rather have: a happy, content customer whos business might account for $5000 worth of fees over the next 10 years, or a person who's pissed off and will NEVER do business with you again, BUT you've got his $5000 up-front, TODAY- siezed directly out of his account with no appeal possible. Believe me, it's a no-brainer to these people. They have sort of developed a wierd corporate mindset wherein their past (and ongoing) victomization at the hands of con-artists somehow gives them license to "pass it along" to others. Think the E-Bay purchase will make it all better? Guess again. If ANY company knows the reality of on-line schermes and scams, it's E-Bay. While they certainly know that a nice chunk of their fees come from people who ultimately turn out to be thieves (but hey... their money is just as green as that of the honest folks) do you think E-Bay wants to open THEMSELVES (or a subsidary company) up to the same risks as their bidders are exposed to? No way.
On another issue, I see lots of complaints from those who have BOUGHT things and paid through PP who find their credit cards suddenly drained and/ or billed multiple times for the same transaction. The answer is simple; PP has very lax hiring procedures, ESPECIALLY compared to the standards any bank would impose on anybody employed in a similar position of trust. But don't forget- PP ISN'T a bank, so they feel no obligation to hire (and, of course, compensate) people as if they were. Unlike the "account freezing" thing, the scams pulled on buyer's credit cards aren't a part of any "master plan" by the company, but simply the work of some dishonest employees who nonetheless have access to ALL of a customer's personal information. Yes, it's scary. Schemes are rampent where a PP employee has a cousin or friend set up an account to receive payments in another name. Since it's an "inside job", these "phantoms" will, of course, sail through the PP application process with flying colors- even if all of the infomation was simply "made up". Then your easily-accessable credit card number is used as payment for phony "auctions" and so forth done through the phantom account. The PP employee who actually approves this transaction might very be the one running the scheme! Given their system and the way the computers are networked together, this is pretty simple for almost any employee to do. Even if you DON'T have access to the PP customer database, you almost certainly have lunch in the break room or visit at the water cooler with someone who does. Many people have been quietly terminated for this (rarely, if ever prosecuted- since this would be a huge black eye for the company), and in reality, THIS is where the majority of PP security and investigative resources go: to policing their shoddily-selected workforce.
......to be continued next post
)
Comment