PayPal issue

[chetansha]

I am an Indian citizen, using eBay account and PayPal account since 2007, never had any problem till today.
Today morning at 4.00 am there have been 2 transaction on my credit card which is linked to my PayPal account . I was asleep at that time , so obviously I have not done those transactions in question.

"The PayPal account xxxxxxx was spent on your SBI Card ending xxxx at PAYPAL *SPORTSDIREC on 01/06/19." (Both total £400.00 )

This msg I got from my credit card issuer. I immediately called PayPal and told them about this, they told me they can't do anything and I have to contact my card issuer. I called my cc and told them about this, they blocked my card and have taken a complaint about unauthorized transaction.
Luckily,for me, the transaction was not captured or completed or whatever so I could have it blocked.

Now where has this breach occurred? PayPal is not taking responsibility, and I know it's not my card has been compromised.

How to avoid this in future and how do I fix responsibility.

 

[ch33zw1z]

secure passwords, 2-factor authentication, don't save your information on websites to make it "easier" to purchase, don't let your browser save login's...

 

[akugami]

Hard to say where the breach is at this point. It may not even be you. The breach may be on a web store that you used PayPal on.

Secure Passwords doesn't just mean using special characters, it also means do not recycle the same password for multiple financially sensitive websites. Like banks and credit cards. I find it ok to re-use the same password for things that can be throwaway or unimportant like most browser forums or similar websites.

2-Factor Authentication (2FA) whenever possible, even though it's a pain. While not foolproof, it greatly reduces the chance of breaches.

One of the first things I always do on a new computer is disable the option asking you to save passwords on new websites. This is one of the biggest source of breaches.

 

[darkswordsman17]

Could someone else have accessed your computer (as in physically, not "hacked" but someone just simply going on your computer, and your Paypal stuff auto-login so they go to some webstore and purchase stuff)?

If not, then it would seem that your Paypal account got compromised somehow (since I don't see how or even why they would've used your Paypal instead of your credit card if it was what they had compromised).

Another thought, did you use an internet cafe or other communal computer and accidentally leave your Paypal logged in?

I'm a bit surprised Paypal is saying there's nothing they can do as this seems like a fairly typical fraudulent charge, so unless they can absolutely ascertain that it was you doing it, they have a system for this stuff:
https://www.paypal.com/us/webapps/mpp/security/unauthorized-transactions

But if Paypal isn't willing to do anything, looks like your only real option is to claim fraud through your card (which from what I've gathered will lead to Paypal closing your account - I don't know, they might even do other things like if you had a paypal balance you can probably kiss that good bye, not sure if they'd try and send you a bill for the money and if you didn't pay send you to collections or something).