Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

That is very bad. The small deposit + verification is exactly how Paypal used to do account linking - I don't know if they've since added extra steps.


It's how everything I've ever used for ACH transfers does account linking, from Paypal to other banks. They assume, and mostly rightfully so, that if you can view an account's recent transactions, you control the account.


Google also does this method of verification for their Adsense payments -- just type in the amount deposited and your account can now receive payments from Google.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: