> The next morning, I called PayPal and asked them how the seller could’ve opened a case on my behalf against themselves. They weren’t sure.
That's scary :/
That's scary :/
PayPal is the most annoying service I use because it asks for 2FA for every damn action. So how could they take that action? Surely if they logged in they left breadcrumbs?
The post is mildly infuriating because it doesn’t even try to answer very important that question.
My own experience with using PayPal usually (as in: almost always) goes like this:
I get a PayPal popup that says something like "You're already logged in! One moment," and then once that goes away I push the whatever button corresponds to "Yeah, sure -- pay it."
It's generally a one-button operation for me, and has been for years.
I wonder what the differentiation is.
This seems like a HUGE loophole