Live data from Hacker News

PayPal and zero-dollar invoice spam

troyhunt.com

41–50 of 77 posts

Re: PayPal and zero-dollar invoice spam

#41
I've been getting the same emails for a while now. I sent to paypal through email and got no response. I also added on a topic I thought was relevant on their forum, and a guy there said he reported it and got a less automatic response than I did.

https://www.paypal-community.com/t5/Access-and-security/Gett...

I haven't got more messages lately, so I'm guessing they managed it already.

Re: PayPal and zero-dollar invoice spam

#42
post #38

Earlier quoted context omitted.

If you can keep your email address off the front page of the internet, I figure that will help reduce spam.

At this point, that's like trying to reduce flooding by not dumping a bucket into the river. There's so much spam out there that your only hope is effective filtering.

Oh, I've still got filtering, but it reduces how good/aggressive my filtering has to be.

It is indeed very difficult to keep ALL your email addresses from being publicly listed, so I use GMail accounts for the ones plastered all over the web, and let GMail handle the spam.

Re: PayPal and zero-dollar invoice spam

#43
post #35

Earlier quoted context omitted.

I mean, it does slightly increase your rate of spam. I have a private email that I only give out to RL people that has never received a spam message.

Wow I love this idea! Can't believe I haven't thought of it

Having a 'spam email' that you use to sign up for stuff and a separate one for non-automated communication only is definitely a good idea.

Re: PayPal and zero-dollar invoice spam

#45

PayPal employee here (and I'm hiring Node.js developers :P ). I actually got two of these messages while I was out for the holiday break. I don't work on the team that handles invoicing; but, I (among others) made them aware of this issue and they are definitely working on a fix. The challenge, of course, is that there are plenty of legitimate reasons for sending $0 invoices and we don't want to artificially make our…

Don't know if you can answer this: Why can I venmo people money instantly and paypal holds my money for days or weeks at a time?

Re: PayPal and zero-dollar invoice spam

#47

PayPal employee here (and I'm hiring Node.js developers :P ). I actually got two of these messages while I was out for the holiday break. I don't work on the team that handles invoicing; but, I (among others) made them aware of this issue and they are definitely working on a fix. The challenge, of course, is that there are plenty of legitimate reasons for sending $0 invoices and we don't want to artificially make our…

Don't know if you can answer this: Why can I venmo people money instantly and paypal holds my money for days or weeks at a time?

Holding onto funds is how you mitigate risk as a bank or money transmitter.

Re: PayPal and zero-dollar invoice spam

#48

PayPal employee here (and I'm hiring Node.js developers :P ). I actually got two of these messages while I was out for the holiday break. I don't work on the team that handles invoicing; but, I (among others) made them aware of this issue and they are definitely working on a fix. The challenge, of course, is that there are plenty of legitimate reasons for sending $0 invoices and we don't want to artificially make our…

Don't know if you can answer this: Why can I venmo people money instantly and paypal holds my money for days or weeks at a time?

You can not venmo money instantly. The UI makes it seem that way, but it takes a few days for payment to process and as such, Venmo has become a target for scams: http://time.com/money/4036511/venmo-more-check-than-cash/

So do not use Venmo for commercial transactions (buying things of Craiglist for example) and do not assume the money transfers immediately.

Also shame on Venmo for misleading their users; they should do a better job of explaining how the transfer actually works.

Re: PayPal and zero-dollar invoice spam

#50
post #46

You can send invoices to people to get paypal to show their name to you and connect names to emails

I can also do that with DirectDebit (ACH for you yanks) transactions in the UK for example; brute force branch sort code and account numbers and when you "transfer money" (you can do 1p, or even cancel the transaction once the TUN code has been generated iirc) you get the name associated with the account.

There isn't much you can do about it, detecting an abuse of an invoicing system and locally blocking it is much preferable to the other potential outcome of not knowing or being able to confirm where the hell did that invoice actually went.

Post reply on HN