Also, as much as we would love to say companies are responsible for the security of our accounts, losing credentials is also a user issue.

About 3-5 days after each payment was confirmed Paypal would reverse it due to it being unauthorized. More so the payment would show up as confirmed/valid initially, at no point during the process did Paypal make you aware of the possibility of the payment being reversed nor to help you confirm/validate that it was in fact authorized by the account holder.

> Also, as much as we would love to say companies are responsible for the security of our accounts, losing credentials is also a user issue.

Of course it's a user issue at a certain scale, but when it's that prevalent I am inclined to say that company is primarily at fault.

It was just a WoW account, so not a big deal for me, but I'd really hate to be a merchant or someone otherwise relying on Paypal day-to-day, that sounds absolutely horrible.