Heads Up! - Paypal Changes.

Ice Tea · 19 Oct 2020 at 12:35

If you don't already have 2 Factor Authentication setup on your account you are now locked out until you do.

Haze · 19 Oct 2020 at 14:07

Will have a look when I get home

Deleted member 77746 · 19 Oct 2020 at 14:08

Ice Tea said:
If you don't already have 2 Factor Authentication setup on your account you are now locked out until you do.

I guess that's due to the vast amount of customers been hacked.

Ice Tea · 19 Oct 2020 at 14:18

New EU PSD2 regulations and UK users are getting it enforced regardless of Brexit.

Deleted member 77746 · 19 Oct 2020 at 14:19

Ice Tea said:
New EU PSD2 regulations and UK users are getting it enforced regardless of Brexit.

Really? We not in the EU now though so how can it be enforced? or is it now UK policy?

enigma27 · 19 Oct 2020 at 14:21

PSD2 actually went live in May 2018

The UK already implemented it before Brexit

Semple · 19 Oct 2020 at 14:23

Good.

Frankly anyone who's had their account hacked without 2FA enabled, shouldn't even have any recourse for refunds etc.

Deleted member 77746 · 19 Oct 2020 at 14:26

enigma27 said:
PSD2 actually went live in May 2018

The UK already implemented it before Brexit

ah I see! Does this apply to all websites now or just payment transaction ones?

Stu999 · 19 Oct 2020 at 14:49

Sounds fair enough to me. Don't know why you wouldn't have it enabled.

Diddums · 19 Oct 2020 at 15:09

Bouton Aide said:
Really? We not in the EU now though so how can it be enforced? or is it now UK policy?

Don't think it matters. If they're based abroad and you want to play on their field, you have to wear the shoes they tell you to, no?

Deleted member 77746 · 19 Oct 2020 at 18:16

Diddums said:
Don't think it matters. If they're based abroad and you want to play on their field, you have to wear the shoes they tell you to, no?

Yes.

pastymuncher · 19 Oct 2020 at 20:03

There is no good reason not to have it enabled on anything that implements 2FA anyway. It can save a lot of aggro if someone ever attempts to hack your accounts.

muon · 19 Oct 2020 at 20:06

Bouton Aide said:
Really? We not in the EU now though so how can it be enforced? or is it now UK policy?

It's Paypal policy. That's all that matters. You are free to use someone else who will not adopt the more secure method of logging in.

Don't understand the furore.

jpaul · 19 Oct 2020 at 20:10

they only allow texts ? ....

jpaul said:
...paypal

I don't currently use 2 factor to login to Amazon, but it would appear ebay/paypal are mandating this ?
will have to do some internet trawling later today, as do not have reliable phone connection

To meet new regulations, Strong Customer Authentication (SCA) is being added into the PayPal login.

This means that when you login or pay with PayPal, you may be asked for a one-time code that we send via SMS to the phone number you have registered in your profile.

To keep using your PayPal account without interruption, please check that the phone number in your profile is correct.

https://www.paypal-community.com/t5...g-Customer-Authentication/td-p/2011104/page/4
My (very limited and uneducated !) understanding is that the Directive and/or UK Legislation specifically addresses the problem of customers with no phone access by requiring that an alternative solution must also be provided. Anyone know for sure and, more to the point, know how to raise this Paypal stupidity and apparent non-compliance with the appropriate regulatory body ? Companies various just assuming "everyone has a mobile in use 24/7" and making these kind of changes need to be seriously challenged and forced to stop knowingly preventing some customers from accessing services just to make life easy for themselves.

I can also confirm that attempting to raise the issue and find a solution with Customer (lack of) Support is a complete waste of time having tried ages ago and again recently. Soon it will no doubt be totally impossible for me to even contact Customer (lack of) Support due to not being able to get around the "you must have a working mobile phone in order to access Paypal" problem.

Click to expand...

muon · 19 Oct 2020 at 20:14

You must have a working mobile to access many services. Why would this be any different.

mrk · 19 Oct 2020 at 21:17

I use PayPal with a 2FA code off the Authenticator app (I use the MS one as it's just better featured than Google's one. Texts are extra faff.... Get SMS, read SMS, delete SMS, go back to login prompt with code from SMS... Faff! Plus if your phone is in flight mode or GSM network is down, you won't get the text which is why app provided 2FA codes are just better as you don't need an active connection for it to work.

Steeps · 19 Oct 2020 at 21:28

Was a pain in the fluff getting the Amazon ones set up for work, seller and vendor are two separate accounts and needed unique email addresses, not too hard adding an extra inbox. They also wanted unique numbers per account, fortunately my personal Amazon account isn't 2FA yet so I've got a work one running on my personal phone until Amazon forces that change through.

Feek · 19 Oct 2020 at 21:35

mrk said:
Texts are extra faff.... Get SMS, read SMS, delete SMS, go back to login prompt with code from SMS... Faff!

I hit the button in the Paypal app to get the sms, it turns up and the phone autofills it straight from the incoming sms. It's practically instant, far quicker than messing about with the authenticator app.

mrk said:
Plus if your phone is in flight mode or GSM network is down, you won't get the text which is why app provided 2FA codes are just better as you don't need an active connection for it to work.

If you don't have an active connection, how can you access your account? Just wondering

Jambo · 19 Oct 2020 at 21:37

Ice Tea said:
If you don't already have 2 Factor Authentication setup on your account you are now locked out until you do.

Heads up! No I'm not.

jpaul · 19 Oct 2020 at 21:47

Feek said:
I hit the button in the Paypal app to get the sms

if you don't have gsm coverage, or wifi calling it's not an option

mrk said:
I use PayPal with a 2FA code off the Authenticator app (I use the MS one as it's just better featured than Google's one. Texts are extra faff.... Get SMS, read SMS, delete SMS, go back to login prompt with code from SMS... Faff! Plus if your phone is in flight mode or GSM network is down, you won't get the text which is why app provided 2FA codes are just better as you don't need an active connection for it to work.

ok I'll look that up, was planning to try authy
https://www.maketecheasier.com/google-authenticator-windows/

I'm learning, but seems you initially need to synchronise it with the paypal so may need one text to set it up ...

another article i'd read on paypal vulnerabilities
https://cybernews.com/security/we-found-6-critical-paypal-vulnerabilities-and-paypal-punished-us/