Fraud in HEPHZIBAH, GA

[SFXPerformance]

We have someone in HEPHZIBAH, GA trying to commit fraud. Some how they are changing the amount at check out, so that the order total is not $369.99 that they pay, but only $0.10. They keep coming at us and we cannot figure out how they are doing this. Our IT person is frustrated and we are about to take drastic steps to prevent it. 

[PayPal_Andy]

SFXPerformance-  Let me preface this with the fact that I'm not trained in website coding nor website fraud investigations.  That being said, here's a possible way for this to happen. 

If the information in your buttons isn't encrypted (meaning you can look at the source code and see the amounts), then someone hacks your website and changes that total to, say, $.10, then they check out.  Our system just sees the variables passed by your website, so it doesn't know that it's not supposed to be $.10.  So this is one possible way for something like this to happen.

I wish you the best of luck at getting to the bottom of the problem.

Andy

[123finale]

The name HEPHZIBAH rang a bell because I got a message from a person with the name; Hephzibah with the stated intention of purchasing my item via my craigslist ad. I then got 3 notifications from paypal that I have a "apyment pending." The person claimed to have paid an extra $100 and urged me to send $570 out of pocket to a western union address claiming that they added that ammount to the payment as well, and the paypal notice shoed that ammount being added. The $570 was supposed to be for a company in TX for picking the item up.

I then logged into my paypal account and there is NO payment there so the scam becomes clear to me.