Security Breach using PayPal android app.

[selfcultivation]

 Last week I used PayPal app on android phone to process a client's credit card payment. Later that day the client had a $500 fraudlent charge on that same card at Walmart. Client said she had used that card no where else for weeks prior or following our transaction. Security was breached somewhere...? What can I do to insure against such breaches in the future? Thank you very much.

[DPCreations]

What PayPal app did you use for the sale?

How did you take the payment?

What was the product?

Did you give the buyer a receipt?

Did you write down the customer's credit card number somewhere?

[selfcultivation]

Hello DPC...

I used the PayPal app downloaded from the Google Playstore (PayPal Here Version 2.7.0 Build 3038). The payment was via credit card number entered manually. The sale was for professional counseling services over the phone. The buyer choice to receive the receipt via email. I wrote down the CC number in pencil on a page, which is still in my briefcase/binder. Thank very much for considering this problem.

[DPCreations]

That was a very high risk transaction.  You left youself open to dispute.

First, it is agains credit card security policies to store writting credit card information; that is a serious breach as you could easily transmit that iinformation to another party.  And you even left the nubmer exposed in an insecure location for antoher person to see.

Entering numbers manually leaves you open for disputes of unauthorized charges as you didn't didn't swipe the card to show the card was present.

PayPal Here is for use with the manetic card swiper or bluetooth reader for chip cards.

If you are going to make more sales, you really need to protect your business with a buetooth reader for chip cards.  You also need to have a detailed invoice to go with the credit card charge and the invoice number should be on the credit card receipt.

If you had used the proper card reader, then you tell the buyer that there is no chance that the card information was hacked as you wouldn't  even know the number and no information was stored on your device.

Your credit card receipt will show that the sale does not qualify for seller protection.

You need to make sure that the card presented is valid and the that person presenting the card is identified.  You are the first line of defense to protect your buisness.