Let us discuss stupidity, shall we? In fact, let us discuss the stupidity of BK, shall we? After all that talk about scam paypal e-mails, I get one today. Unfortunately, it says something that made me nervous because it happened for real once before. So, like an idiot, I click on the link in the e-mail. It takes me to some paypal page that makes no sense, as if it took me to the wrong page. But, at the top is the standard menu bar, including log in. I click - and a page comes up with my paypal username. So, it seems real, because how else would it have that information. I enter my password and am taken to my account. There are no problems or flags and I know I've been instantly hoodwinked. I change my password instantly, but I can't remember if I did it from there or if I went directly to paypal. I also transfer the money to my bank account immediately, so that there is only 15 bucks left in there.
I call paypal and tell them what happened and that I can't remember if I changed the password from the link or the real site - I change it again. By this time, twenty minutes have gone by. I did receive a confirmation of the bank transfer and of the password change, sent to the proper place, so that gives me hope that I did it directly from their site. I also immediately checked with my bank and there has been no untoward activity today (and you know how fast these people work), so I'm hoping I'm safe. The bank also told me that companies like paypal use encryption systems on account information (you know, only stars until the last four digits) that is very hard to hack. Whether they had time to, who knows. I'll be checking with the bank every few hours now, because if there was a problem the mothers would have to be making purchases or whatnot online. And they know they have to move fast. I also switched most of what was in that account to another account, so that only what I need for the few outstanding checks I've written is in there. That's all one can do, I suppose.
Paypal then sent me an e saying it was indeed yet another bogus e-mail and that they were "investigating". Changing the password as quickly as I did, does prevent them from getting in - it just depends how quickly they work.