21-11-2019 4:44 PM
Well this is a strange one - can you be a bit clearer about the problem?
What you appear to be saying is someone signed into your account, )having first bought one of the very many identical phones you've got for sale, and have sold previously,) and issued themselves a refund after you sent them their item?
And another someone did the same thing?
eBay agree unauthorised activity has been carried out on your account but haven't removed the listing?
PayPal agree you've been compromised but are still trying to get the cash from you?
What you're describing, if I understand it correctly, that's not opinion, it isn't possible - the simple mechanics of it don't work.
Can you break it down because as it stands it makes literally zero sense.
For money to be refunded when you don't have a PayPal balance that is sufficient to meet the refund, you'd need to sign into PayPal to issue the refund. Non balance refunds can't auto-issue. If it had been refunded from a balance there wouldn't be any pending status in eBay.
That means your PayPal account would have to be compromised too - so lets get a better idea of exactly what's happening.
Go to PayPal, click one of the refunded payments, tell me what it says under associated payments.
Well, you have done everything we suggest one does, for a hacked account , changing passwords on all accounts you own, and conatcting eBay.
I would also advise you contact Paypal, and also advise your bank about this breach.
If you did not get a satisfactory answer from eBay CS when you called, call again tomorrow morning, early, the lines open at 8 a.m. there's more chance of Dublin answering, and more chance of you getting a fully informed answer.
Has eBay sorted this out now?
Have you spoken with PayPal too?
You also need to work out how your account was compromised in the first place. Presumably you have up to date security on all of the devices you use? You should be aware of how to stay online, and each site that you use (particularly financial ones) MUST have a password that is unique to that site. Your most important account is actually your email, because once somebody has access to that, it's a gateway to every other account you own.
Most accounts are compromised because you've logged on on an unsecure wifi connection (perhaps when out and about), or left yourself logged in somewhere, or via a phishing email. An innocuous looking email pretending to be from PayPal or eBay arrives, it features a link which, when clicked on, leads to a spoof log in, where your password is captured. The golden rule is never to click on any link in an email, but to straight to the site in question to see if there really is an issue there.