Hi. I use PayPal for many transactions but too often I encounter the same security problem as follows:
After paying through PayPal the system returns me to the vendor website (or sometimes I need to click a link to do so). But too often, the vendor website DOES NOT ACTUALLY LOG OUT OF PAYPAL once the sale is completed as part of that process. Having experienced problems with this before, I always double-check by later navigating to the PayPal site to see if my account has been left open. Too often, the vendor payment portal payment portal LEAVES MY PAYPAL ACCOUNT OPEN AND EXPOSED TO ATTACK and I have to manually log out of my PayPal account to keep it safe. I reported this to PayPal over a year ago and this SERIOUS security issue still occurs. It happened to me today with a payment through a large Australian Corporation. PayPal told me that it is up to the vendor's webmaster to make sure their site logs out of PayPal at the end of a transaction. But this is just not good enough. I would have expected that PayPal would insist that this should ALWAYS happen - even with penalties for failure to do so. I don't think it's fair that I do everything I can to stay secure and PayPal itself can't even police something as basic as this!
