Help - Search - Members - Calendar
Full Version: Skype Account Hijacked and Unauthorized Payment Made From PayPal
Skype Community > English > General discussion > Security, Privacy, Trust and Safety
Ronald Waugh
Someone hacked into my Skype account on November 10, 2008, charged my PayPal account for 50 Euros, changed my password and the associated email address. (In reading these forums it seems I'm not the only one!)

I notified both PayPal and Skype within an hour of this happening (fortunately Paypal sent me a notification of the payment; otherwise I wouldn't have know that it happened).

Skype still hasn't resolved the issue, refunded my money or given me my account back (I've had to create a new account and am understandably VERY reluctant to use SkypeOut again). And PayPal refuse to take any responsibility for this (and personally, I can imagine that they are correct...the problem is a lack of security in Skype).

I think this lack of response/support is inexcusable.
GLADIATOR
PM me following details, I will try to help
1. Approximate date of a last purchase made with your SkypeOut account (can be looked up from the credit card statement or from the confirmation email sent to you after the purchase).
2. The order number
3. Payment method or Credit Card type used to make a purchase
4. Email that was entered during registration (if any)

Additionally, in case you have purchased with a credit card, then please provide us with:

5. The first 4 and last 4 numbers of the credit card used
6. Name on the credit card

Or in case you used PayPal or Moneybookers, then we need this additional information:

5. Your registered PayPal/Moneybookers email address
6. PayPal/Moneybookers Transaction ID

That way we can complete our verification and change your registered email address
Ronald Waugh
Many thanks for your offer. I have PM-ed you the requested details.

best regards,
Norman Musgrave
Thread moved to ''Security''.
AnotherLostAccount
Hi Ronald,

Your experience duplicates mine almost exactly ... the only significant difference being the amount stolen from your PayPal account. In my case they managed to take 150 Euro before I stopped payment from PayPal to Skype. Based on what I've seen so far, a person would have to be crazy to give Skype automatic debit authority on any account after they've vistied this forum. Unfortunately those of us who fall victim to these scams find out about the holes in Skype security too late! I'm seriously thinking that the root of the problem may be a dishonest Skype employee who has access to the necessary data, such as account passwords ... but who knows, maybe the thief just made a lucky guess smile.png Skype allows any number of 'guesses' during the login process, so an automated bot could just keep trying random patterns ... bound to hit a good one once in a while!

Talking of automated bots, I think that is how the the Skype support team is staffed. I've received a number of autogenerated responses, but the closest they've come to solving the problem (after six weeks) is to tell me that my PayPal account has been compromised (true, but only by Skype!). It might help if they were to read the support request more carefully before sending out these canned responses.

Gladiator, on this forum, was kind enough to forward my problem to a 'higher level', but so far even this has failed to get me anywhere. Please post here on the forum if your problem is successfully resolved .. it might give me some reason to hope. I will certainly publically acknowledge satisfaction if I get it. Meanwhile, I'm just

AnotherLostAccount

P.S. As so many people seem to have become victims of this problem, perhaps it's time to get together and consider combined action, rather than just battling on alone? There's strength in numbers.
Ronald Waugh
Thanks for your posting. Interesting that your event took place at the same time as mine...about six weeks ago! I am thinking about alerting friends and colleagues to this problem on LinkedIn, Facebook, etc.

I know many people who have SkypeIn, SkypeOut, etc. which they fund with credit cards and PayPal. Skype's lack of security in this day and age is unbelievable and inexcusable. For example, you mention the ability to try different passwords an unlimited number of times. My bank allows THREE times and then you have to call them to get a card reinstated.

Let's hope that others with the same experience join us in warning others and protesting Skype's laxness. It might have some effect.
Redstorm
I got done by this yesterday, while ofline someone changed the password and email so I cant retrive a token to reset it.

I had several email relating to Skype business they better not be charging my credit card 250EUR. Ive entered a support request but have had no response, if i search for my old skype account now it appears not to exist.


Your Skype Business Control Panel named Nesle Garcia will be automatically credited with EUR 250.00 when the balance falls below EUR 2.00. You can view or amend Auto-Recharge settings by signing into your Business Control Panel from http://www.skype.biz and clicking the 'Payment preferences' link under the 'Company' tab.

Talk soon,

The people at Skype

== Getting help for Skype ==

While you cannot reply to this email, you can contact us through our Help section at http://www.skype.com/go/help for assistance. You can also visit our forums at http://www.skype.com/go/forum.

Norman Musgrave
Redstorm,
See my PM.

p.s. Double posting is not supported.
Use the Forum ora PM but not both at thesame time.
Thank you.
tornadosailor
further stolen accounts and unauthorized payments....

end last week several people in our company received arequest for file transfer of an ***.exe file and 3 of them unfo allowed transmission of it. After a few seconds same file was sended to all their contacts and password and email changed immy. In one case they have tried to transfer money from PayPal account and even called a contact asking for a mobile number of one of the persons and called his celluar. Due to language problems he was unable to find out what the lady calling was asking for. I have sent a ticked to Skype on Monday but sofar no reply from them. Pls help us to get the accounts and money back!

Many tks in advance
xojenn
I'm not really sure what is going on with my account. So in the beginning of January I received two e-mails with the subject as "Welcome to Auto-Recharge" apparently I had signed up for this. I didn't. Then I got e-mails after with the subject as "Skype: we've delivered your purchase" and "Auto-Recharge successful." It turns out that whoever authorized this enabled it so when the account does fall below 2EURO I get charged 100EUR that should go into my skype account but it doesn't.

After massive amounts of e-mail to Skype Support and PayPal, I managed to get my money refunded to me. (It's actually still in the process; they've acknowledged the problem, I'm just waiting for it to show up in my credit card account.) I've also unlinked my PayPal account and any credit card linked to my skype account. And then it happens again. Today at 5:38am to be exact. I received all of the e-mails in a row again saying that I've signed up for it to credit my account for 100EUR and that it was registered as a purchase. I've checked my purchase history but it doesn't show up there. I've also checked PayPal and my other credit cards to see if there was a charge but there wasn't.

I'd like to know what's going on here. Is my account Hi-jacked? What can I do to stop this?
GLADIATOR
If your account is hijacked.
First try changing your password
Next raise a ticket via help.
Then drop a PM to me or any moderator with details, your user name and last 4 digits your CC
Ronald Waugh
I've given up and told them to close the account. I did everything you said. Skype takes no responsibility, claiming - incorrectly and unfairly - that it was MY fault that someone broke into my account. And this after months of unresponsiveness.

In their short-sighted approach to this issue, they have lost a good customer. And created serious badwill. I of course will now advise all friends and colleague to avoid any paid version of Skype and to search for alternatives which can provide an acceptable level of service and security.

It's too bad, because technically it's a pretty good system. But as a company they really suck.

GLADIATOR
QUOTE (Ronald Waugh @ Thu Feb 12 2009, 00:15)
Go to the original post
I've given up and told them to close the account. I did everything you said. Skype takes no responsibility, claiming - incorrectly and unfairly - that it was MY fault that someone broke into my account. And this after months of unresponsiveness.

In their short-sighted approach to this issue, they have lost a good customer. And created serious badwill. I of course will now advise all friends and colleague to avoid any paid version of Skype and to search for alternatives which can provide an acceptable level of service and security.

It's too bad, because technically it's a pretty good system. But as a company they really suck.


Who did you PM for help. If me sorry, please let us know.
We try hard to follow up.
afrokiwi96
Seem that hijacking skype accounts is getting more frequent
with the changing of passwords and Email address then using the skype credit to have paypal to move credit form bank/credit card to skype
then getting no communication from skype support following auto reply email saying 24 / 48 hours

just check forums ie: password problem or web search skype account hacked or hijacked or class court action against skype

My dads skype account has been hijacked and other than auto reply no futher communication with skype support

appears that the only action is being taken by a couple of moderator of the forums even though they give impression they are not employee of skype

Hope you can help my dad

skype name dave_charlie
email wankambeachfarm@hotmail.com hacked to ????
name wankam beach farm hacked to soft_diesel
password ******* hacked to ????

anotherhijackedaccount
Same here.
My account has been stolen, password and email changed. I didn't get any email confirming changes on my skype account. My password was not simple. I didn't use Skype on public places and I use a very secure linux OS.
I think there is a serious security hole from Skype's side. The sooner they accept this posibility the sooner they can start doing something about it.

I sent an email to all my contacts explaining what happened and I recommend everyone with an account hijacked to do so.
Bourbaki
Yet another victim here.

Strangely, when I logon to my account using the web interface, I can see a long list of fraudulent calls made during the lat two days, but the Skype client doesn't show any of those calls. So while my Paypal account was being depleted, my Skype client didn't show any new calls in the Call History.

Apparently Skype realized that something unusual was going on, because if I log on via browser (not through the client) I get a message stating that my account has been blocked. The message asks me to contact customer service, but then, it links to a "customer support" page where all I can see is a database of FAQ's, not any way to contact anyone at Skype.

Is there any way at all to contact this company to report fraud?
Thomas Chalmers
Hi there,

I have experienced the same problem. First of all I was sent a link by one of my contacts which looked like a bonafide skype link - this came back as blocked. However, within half an hour I noticed that a box had came up on my screen saying that I had changed my password.

I sent a support request to Skype last evening as I am worried about my credit card details being used but havent had any response. I am now locked out of my account but people who have me as a contact see me as offline but with a website address beside my name the same as the link i was sent.

Can anyone help?

Regards,

Thomas
GLADIATOR
for Hijacked accounts please PM me or Norman IMMEDIATELY with all details/answers per the link in my signature
For Blocked accounts raise a ticket, if no response within say 3 working days, folow same procedue i.e. PM me or Norman ALL those details as per the link in my signature

Norman is doing an OUTSTANDING job, and I too do my best
theprogphotographer
Earlier today some idiot seems to have done the same to my account!

I got an email though with the wrong name on it, it called me "paulgud ad01" and said I'd brought 10 pounds worth of credit, then it emailed me saying it had been changed to dollars.

I then checked and theres been phone calls made on it and it was paid by paypal, which I don't even have an account with!

Now I've got an email saying "We've charged back your order", with the status 'fradelent' on it.

I hope I don't get accused of all this because I don't have a clue what's going on with it!

I have changed my password and email address linked with it now though so I hope it won't happen again.

What shall I do?

Please help.
theprogphotographer
Hello again

I have spent the entire weekend not on Skype since my last message as I have been at my boyfriend's house, then came back tonight to find that regardless of changing my email address and password associated with my skype account, even more credit had been brought on someone else's paypal and used!

I am absolutely furious at this and sick and tired of my efforts to stop it from happening. It is now doing my head in, so I am deleting my account and using another chat client instead, as I initially downloaded the program to chat rather than to make calls.

So farewell Skype.

(I apologise if this does seems like I am rubbishing Skype, I am just frustrated and trying to get my point across)
theprogphotographer
I now see that I also cannot 'delete' my skype account. This is also very infuriating.

I have deleted skype and I hope my account goes.

Grr.

ollyog
I've just had the same thing happen to me today.

Got an email from skype saying they changed the conversion from EUROS to GBP. Thought nothing of it, and assumed it was spam. Then got one saying "We've delivered your purchase" and then details of £10 going from the paypal account. Then another after saying "Currency conversion successful" from GBP to USD. And then another email after that saying:

"We've had to reverse your order
Unfortunately, we have been forced to reverse your recent order with Skype. The order did not pass our anti-fraud measures. We will return the money to the account the payment was made from and stop delivery of the service you ordered."

I'm uterally confused as to what has happened, the password was not changed but the name of the account was different to mine and I've just logged into skype to find all my contacts list deleted? How could this have happened? I only use skype on my own personal mac...
robybobey
I had the same problem a few weeks ago. But SKYPE WON'T DO ANYTHING ABOUT IT apart from say "Skype can not refund the money you might have lost due to this incident.
Every user has to take care of his/her security systems on private
computers."

They say it as if it's our fault. I have a secure firewall hidden behind a VPN for christs sake. It's a joke. Never using Skype again, and will complain to Watchdog unless I receive some kind a refund.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.