hi my fellow gamers,
any of you ? or most of link your paypal to ur d3 ?

for my case i've only created my paypal account solely for d3, and solely for my d3 sales.
only to receive payments, and never to make any payments. im strict not to spend any money on games.

anyway. i received 3 transaction emails yesterday that my i've successfully made payment to a seller named 'sirichai supradit'. my balance went 0.

and this bugger created monthly recurrent payment of USD100+ to his account and to be charged to my paypal account. and it's directly charged into my credit card.
i went crazy and settled everything quick enough, had my bank cards replaced, called the bank to block the payment.. etc etc.

now the thing is, i have never ever used paypal for anything else except d3. no other party should be involved or know/get involed in my paypal.

my biggest guess all this happen because of blizzard, how and why. i dont konw.


just a heads up, just do frequent checks on ur accounts.





* oh ya i sent dispute to paypal, and they're processing on my refund already.. after some investigation

This post has been edited by paranoid: Jan 17 2013, 11:35 AM

woahh..this is new..need check that..

plz dispute to paypal... most of the time u will get back ur money...

and plz make sure ur paypal password is diff from ur d3 password...

i know many ppl want easy, so both same password...

the best practice is email password, d3 password and paypal password all diff...

This post has been edited by HenryLow: Jan 17 2013, 11:39 AM

I have already unlink my Paypal ever since the last incident back in August..

i had a case about 2 years back.

i bought gayrena shell with my credit card, and it directed me to paypal to fill up my cc info to do payment. i though it should be save.

who know 2 weeks later i received a call from Maybank asking me whether i'm using my cc to shop at an european country online apps store? (cant remember its name, sound like Luxemburg), because they detected 2 suspicious charges sum of USD$300+ are coming from there.

what the heck!? i said no, i didn't own any apple products. and so do my family members, they didnt own any apple products too, and i immediately request them to block the charges and disable my card. luckily the maybank cc guys rajin checking the suspicious transactions big thanks to them !

I seldom do online shopping, the most i did is buying movie tickets, and the recent online shopping is buying gshe!!. i wonder how and where my cc info leaking? i suspect it is leaking from 'p' because all my cc info are filled in 'p', not 'g'. since that, i seldom use 'p' and removed my cc link to 'p' account.

so far so good, no problem.

Do you use a firewall software other than Microsoft's in your computer? If you indulged in online payment, a firewall software is mandatory.

This post has been edited by MOBAJOBG: Jan 17 2013, 12:59 PM

link paypal with debit card.
minimize the risk

Do you bid anything on RMAH? What did you do before PayPal sent your money to that person?

Nothing happened to me, has been using the same paypal for gaming and buying stuff online for 2-3 years.

nothing happened to me either... perhaps i'm not rich enough for people to hack my paypal haha

same here.

i use paypal only to receive my blizzard sales income. never to spend.
never bid or bought anything on RMAH.

It is sad to hear that. I think you should create paypal dispute and report to Blizzard to claim your money back.

$100 USD per month is too much!

lol i aint paying shit..
i already sent dispute and got my refund back.

While Many people concern about the Security Level of these Payment Processor Website, eg Paypal..
Boy, what i should tell you is, your are absolutely WRONG.

** I am a veteran web developer since 2006.

The biggest security hole is in your mind, your personal PC, laptop. Normal Internet user has very little knowledge to protect their own account safety.

How to design Password,
How to assign password,
How to secure your pc?

There is no way paypal can protect u. Image how paypal can verify the person sitting infront of the PC??
As long as any1 have the correct password, any1 can access your paypal account.

As simple as that.

Is Paypal Safe? Paypal is definately safe.
There is no such web technology that able to scan the person sitting infront of the PC, CURRENTLY.

What make you not save? You, yourself.

Some fellow stupid enough to use the same password as their email, with forum account, game account.
1 Account compromise, all account compromise.

Take that as a hard lesson.

used paypal more than 10 years. recurrent payment wont happen in diablo 3, it only happen if u set it or u puchase item online that u had agree to make recurrent. therefore in your case it is not diablo fault. it was ur paypal who had been compromised. which i suspected that the thief use it for their diablo purchase. nothing to do with diablo use it unauthorized. that how i believe. or maybe u use some kind of application for your diablo such cheat (which most people fall into trap) who actually act as keylogger to log ur paypal password.

best is use unique password for diff app... remember the linkedin incident... no app is safe. one security flaw in one app should not compromise other apps

lets say your generic pw is "handsome"... so just append a special passcode using the app name.. for eg like diablo3 where D=4, I=9, etc.. then do a special formula (like addition or multiplication of all the numbers) and append to your generic password... simple

Malware, Trojan and other viruses can steal information from your browsers/computer.

So a website may be safe, but not your computer.

well i started this topic as a warning for fellow players.
if you can read properly, i give my scenario and put my best guess to why and how it could've happened.

i'm not a newbie computer user either. i have been been in IT field even before the year 2006. my personal PC has never been compromised by virus, trojan, malware etc. both me and my husband are very experienced in IT field.

as much as i would say i really know what im doing, sometimes this kind of things happen. i can assure you that this fraud does not come from my pc, nor my password.
in the world of online fraud, anything could happen, not even paypal is safe. so dont be so ignorant.

actually you got it wrong.

i mentioned that i only created a paypal account for diablo. solely for diablo3 gaming purposes, because i had to route my earnings somewhere.

my paypal was NEVER used to purchase anything, anywhere. it's only used to RECEIVE my earnings from diablo3 transactions, HENCE my suspicion that i only narrow it down to either paypal or blizzard to be the rootcause of this fraud.

for this fraud, the hacker had emptied my balance to buy something from a jersey seller and created a recurrent payment, because all these details are being sent to my email.
nothing was purchased out of blizzard store.

keylogger is impossible, i've only played d3 on my personal pc.
on whether i used any application or hack, any experienced d3 player in this forum will know the kind of player i am.

paranoid
I've noticed that you're not very active playing Diablo 3 game anymore; is it due to this bad PayPal experience?

hi im taking a short break because im currently expecting

This post has been edited by Moogle Stiltzkin: Jul 15 2017, 10:23 AM

yah. that what I am thinking. there is no way playing diablo alone will enable hacker to get paypal account. unless he using same password for all his accounts.

im not trying to find the rootcause, since i've already got my refund back from paypal.
my best guess is that the problem lies within paypal (hacked) and somehow i was one of the unlucky one, OR via blizzard (since my account details were stored there, paypal and credit card details)

to make things clear, again,
my d3 account wasn't compromised, nothing was taken out, my balance in my RMAH was still there.
nothing happened to my d3. it's my paypal account that was compromised.

and to avoid confusion, i explained that the money stored in my paypal account comes solely from my d3 RMAH earnings. this account has never accessed, bought anything from any website..etc.
which in the end makes me think the problem comes from blizzard or paypal only.

the recurring payment can be set via paypal to another 3rd party. simple as that. nothing to do with d3 account.

This post has been edited by Moogle Stiltzkin: Jul 15 2017, 10:23 AM

lol, why is it so hard to understand.
one fine day i received 2emails from paypal, 1 is a notification of purchase from something thailand merchant, and the other one to inform me i have successfully created a recurrent payment to the same merchant's account. simple as that.

This post has been edited by Moogle Stiltzkin: Jul 15 2017, 10:29 AM

lol if you could just spend some time to read what i wrote in my initial and subsequent posts.

why do you need to know the steps to set a recurring payment for diablo3 on the auction house? my case is not related to any recurring payment in/out to diablo3 auction house at all.
did you know u can set recurring payments in paypal to anyone?


say you updated a personal bank info into one (ONLY one) website. the next thing you know that particular information was used for a frauds case, you've been charged. so tell me WHERE would you suspect the breach comes from?