Someones just bought a tank of diesel with my paypal...

Clav · 10 Mar 2016 at 20:46

In Birmingham apparently on Shell fill up & go, I even got emailed a nice copy of the receipt. Just panicking a bit at the moment after a couple of glasses of wine.

What I've done:

Reported with paypal as unauthorised
Tried to unlink my accounts but I can't find a way to do this??
Checked my bank account - nothing gone from there yet
Changed my paypal password and questions
Set up 2 factor authentication and a mobile pin code in paypal (hopefully to stop more payments)
Changed the default paypal card to a credit card instead of bank account

Anything else I can do here right now? I'm worried that a lot more will get taken and want to protect myself as much as possible.

e: http://www.shell.co.uk/motorist/shell-fuels/fill-up-and-go.html
"To use, simply select how much you want to spend and scan the QR code at your pump from inside your car. " - wtf?

Secondary question, how is this even possible?? I defo have my phone here

Clav · 10 Mar 2016 at 20:57

Brizzles said:
Are you sure it's not one of those " please confirm your payment " phishing link mails ?

What was the senders http addy ?

Not just one email I got one from Shell themselves with a receipt, a paypal one with the transaction details, got my phone notification for the transaction and when i log into my actual paypal it is there.

Clav · 10 Mar 2016 at 21:02

Dolph said:
Contact your bank would be the other thing.

Good shout, I'll do that now

Clav · 10 Mar 2016 at 21:11

zophiel said:
we had a similar issue a few months ago, with shell petrol. We dont eve have a car never mind buy petrol in a london petrol station.

We just wrote to paypal and explained it was not possible and they refunded the money back to our account.

Changed the password etc and scanned the pc just incase

Thanks, this is reassuring

Clav · 11 Mar 2016 at 14:00

Crisis over, Paypal will refund me the money and I still had all my funds this morning when I woke up.

Clav · 12 Mar 2016 at 15:58

Another 45 quid taken ffs. I haven't had fishing emails, I've got a decently strong password as well, not shared between sites either.

I downloaded the shell app myself and tried to link up my paypal but it wont let me, says my account is already registered. I cant even do a forgot my password on it as you have to answer a secret question to go through that.

At this point I just want to unlink my accounts and close my paypal but then I won't be able to get my refund in 5 working days.

Clav · 12 Mar 2016 at 16:21

beachBOYken said:
Hang on why haven't you cancelled your registered payment method with paypal via your bank, or am I missing something?

Anyway hope you get it all sorted!

Not sure what you mean? My account is linked directly to paypal and i can't unlink it as there are pending payments.

Since googling about fill n go brings up this thread I'll just add that if you go to your Paypal account settings, then payments, manage upcoming payments, log in with paypal you can see the link with Shell and remove it. Hopefully this will be the end of it.