Anybody with a @btconnect.com email - BE WARNED!

Hello everyone,

First post here but I thought I should register to warn everybody about what has just happened to me!

I run a small artwork shop online and use a btconnect.com email address. Today a customer said that they sent me a payment, so i checked my Paypal account and there was nothing in there.

So I contacted my customer again saying that there must have been a mistake as I had not received the payment, but they was adiment that I'd not only received it but had also ACCEPTED it too!

I asked for a screenshot of the payment and then I saw the problem....they had sent the payment to kath****@btconnect.co

Notice the lack of 'm' on 'com'? BUT YET THE PAYMENT WAS ACCEPTED.

So i sent an email to kath****@btconnect.co with tracking and read receipt enabled and not only was it DELIVERED but it also got READ about 1hr later!

What gives? Surely this is a massive security issue. Accidentally miss out one letter from your email address and it ends up with someone else!!

In reply to a post by kathburton:

What gives? Surely this is a massive security issue. Accidentally miss out one letter from your email address and it ends up with someone else!!

Well, .co is a valid ccTLD now so it could be a valid address. It is possible that someone has registered btconnect.co, turned catch-all on and is trying to catch things like this.

It isn't a security issue, more human error and just shows that care should be taken when sending payments to an email address.

Matt

Oh i see, I didn't know that. Still it's easier said than done when you have no control over what other people type!

With PayPal, you could send the person that needs to pay you a "payment request" via PayPal.

You enter their details, email and amount and they simply get a request to pay that invoice by logging in to PayPal. If you entered the address wrong, no harm done as you'll just not get paid

Matt