-
VERY IMPORTANT: Payoneer Security Issue
I just found out today from a client that if you give a person your Payoneer Card Number to load funds onto it that they can see your exact real name. DO NOT give a client your card number. Just give this person the email account that you used to register the card under. Payoneer should really fix this. I was under the impression that a client could send money to me anonymously. I guess I was mistaken.
-
Re: VERY IMPORTANT: Payoneer Security Issue
Why in the world would girls be giving out their card number that's just crazy :O
-
Re: VERY IMPORTANT: Payoneer Security Issue
It has two options. When a person loads money to your card there are two options. One is to load the card using the person's email address and the other is to load the card with the card number.
Which ever option a girl chooses to give her client, real name should not be revealed. The is just WRONG. Payoneer should fix this. It is a security issue for us girls.
-
Re: VERY IMPORTANT: Payoneer Security Issue
But still... why would you give a complete stranger your debit card number??
-
Re: VERY IMPORTANT: Payoneer Security Issue
A person cannot do anything with you credit card or debit card if they do not know your name, address, and the 3 digit code on the back.
Try making a purchase online without all three pieces of information. Your purchase will be declined. And a card number without the card present is not going to get you anywhere in person when you are making a purchase.
-
Re: VERY IMPORTANT: Payoneer Security Issue
Although when you pay that way it shows your name. If someone has your name you'd be surprised how easy it is to look up an address. Oh and some places online don't actually require a 3 digit security code due to atm cards not having them. While the amount of those places are rare....I'm sure someone could still do something with it.
-
Re: VERY IMPORTANT: Payoneer Security Issue
Exactly, you just restated my point. Someone would need your card number in addition to your name. With just your card number they cannot do much.
-
Re: VERY IMPORTANT: Payoneer Security Issue
ATM Debit Cards do have the 3 digits in the back. You are mistaken.
-
Re: VERY IMPORTANT: Payoneer Security Issue
While its anyone's guess whether a professional scammer can do anything with the card number or not dont hand it out. If they have your card number its one less piece of info they need to scam you.
When a normal member is paying a normal member privately on Payoneer, having their real name appear may be used to confirm the card number is correct. We are not the only ones using Payoneer's system and our business needs shouldnt be placed above everyone elses.
Showing the name might be a good thing to other industries so they shouldnt get rid of it for a minority, although an opt out button would be handy and shouldnt be too difficult to implement.
This probably wouldnt be a major issue for Payoneer as email address can just be used so I dont think anything will be changed soon.
As stated in other threads, its best to give out your work email address thats linked to Payoneer.
Thanks for posting though Erica to bring this to the attention of other Payoneer users here.
-
Re: VERY IMPORTANT: Payoneer Security Issue
^It is extremely easy to use people's card #s without full information, if you ever visit "Crack Code" forums or IRC channels where identity theft people trade numbers (note: they may no longer exist, I only know this because of a Dateline expose from like 2008) not everything is listed. Not all businesses use premier security systems. The 3 digits on the back are the CSC/CVV code. Just google "use debit card without CSC/CVV code". Full name plus debit card number? People steal identities with less.
Not all people who contact you just want your full name to find you for stalking reasons. There was a guy who posted in Jobs who had a long history online of ripping people's Paypal accounts off. Recently someone tried to send me a teamviewer virus, a few weeks before that someone asked for my banking info in freechat for a 419 scam.
Asides from people you know IRL who you're very close to, Im unsure who people are getting loads from where their full debit card number is compromised. If youre asking someone to load money onto your debit card in a manner where they already have access to your full number, your full name shouldn't be a new discovery. I think this part of Payoneer is not built for the sex industry at all (they do have other kinds of vendors) and isnt a security issue - but something to bear in mind. It is the same as asking idk a family member to wire you money, they need your information to do that. But I agree, this is more something people should be aware of. ... but the risk of giving out your debit card number is extremely high, I feel even silly saying that? But uhhhhhh I guess that isnt obvious: just go to crack code forums. Hell most of them don't even bother to hide themselves, just google them. Or even google "how to commit identity fraud" (FBI may show up at your door lol but there are many guides out there), most people know at least 1 person who has been impacted by identity fraud for a reason. Identity theft doesn't usually happen because of [email protected] geniuses but mostly due to human negligence and assumption of privacy and security that is not there.
Good thing the guy told you? Im always glad to hear when that happens. Thanks for warning people at least.
My understanding is private loads via your load email (ideally under your stage name) nothing interesting is disclosed. I tried sending myself money once and wasn't told anything beyond my email address? I didn't even realize the other option existed. since I don't use it for non-adult. Is the purpose of the other option so it is reduced load fees? :( Come onnnnnn guys.
-
Re: VERY IMPORTANT: Payoneer Security Issue
Quote:
Originally Posted by
EricaErotica
A person cannot do anything with you credit card or debit card if they do not know your name, address, and the 3 digit code on the back.
Try making a purchase online without all three pieces of information. Your purchase will be declined. And a card number without the card present is not going to get you anywhere in person when you are making a purchase.
Up thread I wrote a long thing about this - just to summarize for people skimming: this is not true. Don't just try making a purchase on one(!) site, research how to use debit cards without all of the required info, there are numerous articles and forum posts about this.
I have to stress this: Payoneer isn't built for camgirls exclusively, it is just a prepaid debit card company that also happens to be available to the online adult industry. It is one of the few ones who are process industry payments, but that also means they have other vendors and have services that have universal appeal beyond adult entertainment. People should seriously consider putting up a google aert for "Payoneer" many other industries use it. They aren't under obligation to not provide this service, so your warning is more a warning of appropriate user use.
-
Re: VERY IMPORTANT: Payoneer Security Issue
I used my personal email when I applied for my payoneer card, (waiting for it to arrive), will I be able to change this to my cam email once I have recieved and activated my card?
-
Re: VERY IMPORTANT: Payoneer Security Issue
Quote:
Originally Posted by
Missymissdemeanour
I used my personal email when I applied for my payoneer card, (waiting for it to arrive), will I be able to change this to my cam email once I have recieved and activated my card?
Yes, its in Tools>Edit profile.
-
Re: VERY IMPORTANT: Payoneer Security Issue
Thankyou, I thought you would be first to reply and prompt too ;D
Quote:
Originally Posted by
PrincessJenny
Yes, its in Tools>Edit profile.
-
Re: VERY IMPORTANT: Payoneer Security Issue
Changing my email address is not an option. The company that partners with Payoneer and who I received my Payoneer card from has one particular email address one file for me. That email address is the one that they send my monthly earnings to. On there end I did not see a way for me to edit my email address. I did not want to change my email address because I don't want to risk not getting paid or receiving my payment.
Also, I hope all of you realize that Payoneer is putting ALL of their card holders at risk for fraud and identity theft. Basically a person can go to the Load a Card page and randomly type in a series of 16 digit numbers. As they type these numbers and various card holder names appear all that they have to do then is obtain addresses from these names by purchasing background checks very inexpensively. With a person's Payoneer card number, their name, and their address at hand they can commit all kinds of fraud.
Payoneer is exposing their company to a HIGH degree of liability. With a few key strokes no one should have access to whoever's name appears on a card. PERIOD!!! I am disturbed and appalled by such a blatant breach of privacy and security. Payoneer need to change this feature or eliminate it ALL TOGETHER.
-
Re: VERY IMPORTANT: Payoneer Security Issue
Just to note, changing your email address wont affect payments. Partners pay their payee's via a Payee ID.
Payoneer's system will have been signed off by governing financial (even mastercard themselves?) bodies so I dont think the problem is as big thought.
Paypal and alertpay both give the details away, I would think many more do it aswell.
-
Re: VERY IMPORTANT: Payoneer Security Issue
With PayPal and AlertPay you are entering just the person's email address. With Payoneer you can enter in the card number and be given names of card holders. That is a completely different scenario.
-
Re: VERY IMPORTANT: Payoneer Security Issue
I guess the confusion is..that if given a choice between a card number and an email address...why chose to give your card number which is sensitive information. Theres a reason only the last or firist 4# of a credit card appear on receipts and bills. Scammers do in fact have ways of being able to make charges without a name, address and 3 digit code... Waiters have been making carbon copies of cc for years, and are able to run up credit cards without that addtl info.
I dont understand why you say you were under the impression they allow you to receive money anon and was mistaken...you can if you use an email address.
I hope though that you take it to heart that its not at all safe to give your cc# to anyone. and I would be very careful if a guy suggests he get your card number instead of your email address.
Thank you for the info that they can see your name if you give your cc #.
-
Re: VERY IMPORTANT: Payoneer Security Issue
BlkSharpie, that's not the point. Do you realize that a person can go onto Payoneer's Load a Card page and start typing in random numbers and possibly receive YOUR name? After they have your card number and your name they can go on to commit all types of fraud against you. This person does not need to be a client or anyone who has anything to do with you. They just happen to know about this security breach on the Payoneer system and they use it to figure out card holder names once they successfully key in a valid 16 digit card number. That is the fact that I am trying to alert ALL Payoneer card holders about. That is simply appalling and dangerous.
-
Re: VERY IMPORTANT: Payoneer Security Issue
Quote:
Originally Posted by
EricaErotica
BlkSharpie, that's not the point. Do you realize that a person can go onto Payoneer's Load a Card page and start typing in random numbers and possibly receive YOUR name? After they have your card number and your name they can go on to commit all types of fraud against you. This person does not need to be a client or anyone who has anything to do with you. They just happen to know about this security breach on the Payoneer system and they use it to figure out card holder names once they successfully key in a valid 16 digit card number. That is the fact that I am trying to alert ALL Payoneer card holders about. That is simply appalling and dangerous.
OK, I apologize, I did not understand that this was your original point - I just did it [realized I probably shouldnt elaborate, but it confirms there is a problem] all it did was give me a CAPTCHA bc it thought I was a bot and let me continue. It didnt time me out or ask why I was typing in a ton of numbers.
^sorry if that is unclear, didn't really want to spell it out.
Yes, I 100% agree, it is a security issue for all users not just for those in the adult industry.
Wow, that is uh, really negligent. May explain the incidence of fraud.
I sincerely apologize Erica. It is a big deal.
-
Re: VERY IMPORTANT: Payoneer Security Issue
NOW YOU SEE WHAT I'M TALKING ABOUT!!! I am so appalled and angry right now. Payoneer puts ALL of its card holders in danger. We girls need to demand a change and demand it NOW!!! For the sake of all card holders this NEEDS TO BE CHANGED NOW!!!
-
Re: VERY IMPORTANT: Payoneer Security Issue
And with all due respect PrincessJenny you do not work at Payoneer directly so please do not offer any comments regarding the security of their website and their systems.
-
Re: VERY IMPORTANT: Payoneer Security Issue
For people who don't understand - there is a very simple way for basically anyone to find valid credit card numbers and the name associated with it without really doing much work. The only barrier is a CAPTCHA popup that is easy for any number generating script/bot to bypass. Even if one IP is locked out by the site anyone can bypass that [ETA 12hrs later: the site does not block you out by IP for doing this[. It is a human error problem in the design of the site, not an individual user issue.
This isn't a feature on any kind of prepaid debit card that Ive ever encountered, its functionality serves no purpose / the purpose of high-grade encryption doesnt seem to matter particularly as it isnt even a part of the confirmation page (which would make more sense) of the transaction.
Instead of issuing damage control - I'd assume their programmers have now been alerted to just remove this part of this feature altogether? By COB? ASAP, even?
-
Re: VERY IMPORTANT: Payoneer Security Issue
Same could be said for anyone commenting here, none of us have any facts, we speculate. If it was such a major issue at Payoneer they would of probably changed it by now.
Although in regards to changing email and payments not being delayed, that info is right.
-
Re: VERY IMPORTANT: Payoneer Security Issue
THIS IS A SERIOUS ISSUE!!! I will be on here demanding that this be changed ASAP. ALL SW Members need to join me and be vocal about getting this removed NOW!!! This is a serious security breach that puts every single Payoneer card holder in jeopardy and in danger to be the victim of fraud and identity theft. You do not even ever have to use the load feature yourself or tell your clients about it. You just need to have a Payoneer card. We are all at risk here.