Confidential risk modeling and non-disclosure of security criteria
Hold and limitation decisions may rely on confidential risk and fraud models; PayPal is not obligated to disclose details of its security or risk management procedures.
Supporting quotations
Our decision about holds, limitations and reserves may be based on confidential criteria that are essential to our management of risk and the protection of PayPal, our customers and/or service providers. We may use proprietary fraud and risk modeling when assessing the risk associated with your PayPal account. In addition, we may be restricted by regulation or a governmental authority from disclosing certain information to you about such decisions. You agree that we have no obligation to disclose the details of our risk management or security procedures to you.
Qualifications & exceptions
No obligation to disclose risk criteria or security procedures
Protective account limitations upon suspected compromise
If PayPal suspects unauthorized use or account compromise, it will limit account access to protect funds and investigate the fraudulent activity.
Supporting quotations
If we suspect someone could be using your PayPal account without your knowledge, we’ll limit it for your protection and look into the fraudulent activity.
Qualifications & exceptions
Protective limitation upon suspected unauthorized access
Account review recommendation and unauthorized activity protection
Users should regularly inspect account statements; PayPal covers 100% of unauthorized activity provided users cooperate and comply with reporting procedures.
Supporting quotations
PayPal will protect you from unauthorized activity in your PayPal account. When this protection applies, PayPal will cover you for the full amount of the unauthorized activity as long as you cooperate with us and follow the procedures described below.
Qualifications & exceptions
Protection is conditional on the stated eligibility, reporting and cooperation rules.
Business routing-number debits have a separate, shorter reporting deadline.
Security & Safeguards · Context
Definition of unauthorized transaction
An unauthorized transaction is defined as money sent from an account that the account holder did not authorize and that did not benefit them.
Supporting quotations
An “Unauthorized Transaction” occurs when money is sent from your PayPal account that you did not authorize and that did not benefit you.
Qualifications & exceptions
Must lack authorization and provide no user benefit
purpose: fraud_prevention
Security & Safeguards · Restriction or exception
Users must secure credentials and keep contact details current
Users are responsible for security and control of account-access IDs, passwords, PINs and other codes, and must keep mailing, email and other contact details current.
Supporting quotations
You are responsible for maintaining adequate security and control
Security & Safeguards · Restriction or exception
Unauthorized monitoring, proxies and technical disruption are prohibited
PayPal prohibits anonymizing proxies, automated or manual website monitoring or copying without prior written permission, robot-control bypass, malware, disruption, credit-card behavior testing and actions that threaten supplier services.
Supporting quotations
Use an anonymizing proxy
test credit card behaviors
Security & Safeguards · Context
Authorized account access and reversals have protection exceptions
Transactions made by someone given account credentials are not unauthorized merely because they exceed permission, unless PayPal was previously told that person no longer had transfer authority. Payment invalidations and reversals also fall outside the unauthorized-transaction definition; the error definition excludes shared-access transactions, ordinary balance inquiries and duplicate record requests.
Supporting quotations
unless you have previously notified PayPal
You are responsible for transactions made in this situation.