PayPal isn't a merchant platform -- it's a payment service so yes you can accept personal payments, it might not be covered by seller protection if that's what you mean. That's no excuse for terrible security policies though. I mean literally every buyer had a stolen account!
> How were you determining the accounts were stolen?
About 3-5 days after each payment was confirmed Paypal would reverse it due to it being unauthorized. More so the payment would show up as confirmed/valid initially, at no point during the process did Paypal make you aware of the possibility of the payment being reversed nor to help you confirm/validate that it was in fact authorized by the account holder.
> Also, as much as we would love to say companies are responsible for the security of our accounts, losing credentials is also a user issue.
Of course it's a user issue at a certain scale, but when it's that prevalent I am inclined to say that company is primarily at fault.
It was just a WoW account, so not a big deal for me, but I'd really hate to be a merchant or someone otherwise relying on Paypal day-to-day, that sounds absolutely horrible.