Leave a legacy.

Require 2 factor authentication to sign up for payforit texts

By: andy69 | 12-08-2018 18:00

A lot of people are asking about being charged for payforit texts when they didn't subscribe to them in the first place. And how to stop further charges and get your money back. One way would be to require that the initial text is not charged for but is replaced with a text asking you to authorise the subscription. If you want to receive them, then you just follow the instructions in the text to authorise it. It could be follow a link or reply by text. After authorisation, you receive the original text and are charged. If you don't authorise it, you just ignore and no charges are applied.

-

Comments

by: muggles708
on: 02-05-2019 21:23

Reply received this evening on Twitter from GiffGaff:

Hi there. From May 11th, Payforit merchants will have to make sure that a confirmation text is sent to your mobile before completing the subscription, which will detail the charge and what it's for. This may ask you to put a PIN into the web site to confirm your subscription.

Well done Andy69 and everyone else who has supported this!

by: andy69
on: 02-05-2019 22:24

Although that sounds like a step in the right direction, it looks like it's nothing to do with the network but is sent by the merchant. If that's the case, I wouldn't be surprised if this does nothing to prevent these scams as the companies involved seem to be unscrupulous. They currently claim that people subscribe when they don't. I don't see why they wouldn't just claim that people have gone through the process of entering the PIN. What I expect is the 2FA to be done by the network. IE money would only be transferred to the merchant once the network has received confirmation from their customer that they have subscribed. In my idea, I was expecting that the initial text would be replaced by one from giffgaff to confirm subscription. If the customer ignored the message, then no charge would be made. Consider the example when buying goods from a website: often, you are presented with an authorisation screen from the payment provider to confirm the credit card payment. IE it's independent from the website selling goods. In a similar way, I'd expect the merchant not be involved in the authorisation of debits to my account balance.

by: henryscat
on: 02-05-2019 19:36

Another call for 2-factor PLEASE!


Having never had any problem with this sort of thing before, I got my first scam text from PayForIT / Wapstar today:

FreeMsg: Thank you for subscribing
to Wapstar Content for £4.50 every
week from Wapstar until you text
STOP too 83463 HELP? 03300535841.
Charge applied to mobile phone bill.

I didn't see the Watchdog episode that supposedly covered this last night, but I very much doubt this is a coincidence! Nice one...

by: shazzyq1
on: 01-05-2019 20:21

I received a text today from Nexgen saying I had subscribed and they were going to take £4.50 a week from me. ????

I have never heard of this company nor subscribed for anything. I have sent the stop text and did get a reply stating I had unsubscribed from it so now hoping this will be the end of it.

I think giffgaff should have some sort of protection against this, where do they get our phone numbers from? I don’t give mine out. If we have done everything we can from our end to stop these scammers withdrawing our money then at least giffgaff should refund it.

by: johnrmason
on: 01-05-2019 20:08

After seeing Watchdog tonight I'm worried that there is no verification to protect Giffgaff users against fradulent app subscription. Is there anything that can be done - eg 2 factor auth of some sort?

by: andy69
on: 01-05-2019 19:49

Good to see BBC watchdog highlight this issue tonight.

by: johnrmason
on: 01-05-2019 20:06

Can I add my voice to this - something like 2 factor auth needed for this

by: niccijv
on: 30-04-2019 18:24

Please implement this! Just had to complain about being subscribed for a premium service that I definitely did not subscribe to! SCAM!!

by: yummywerewolfhunter
on: 29-04-2019 16:31

I feel this should be implemented as soon as possible.

by: eugeneboiko
on: 28-04-2019 22:33

It is evident from the commentary here and elsewhere that the payforit scam is very widespread. "We're looking into it" doesn't seem to be an appropriate response from GG. "We're doing it" would be, preferably very soon!

by: beenbop
on: 26-04-2019 15:16

Reading many of the linked comments I can see that giffgaff are ignoring this problem or at best struggling to impliment a solution. If I get hit again I will have to move back to O2 were I can get the barring facility. What a shame.

by: ebonym28
on: 24-04-2019 10:54

Games4Mobile by Nexgen contacted me yesterday saying I have subscribed (when I haven't, never even heard of the company) and saying they will take £4.50 out of my account.

Look at how many people have backed this because I know for a fact I am not the only one that isn't impressed by this!!

by: lindsaydone
on: 26-04-2019 12:30

I too had one of these texts yesterday and today they have taken £4.50 out of my account. I sent a STOP message (separate from their link) and have recieved a confirmation text saying that I have been successfully unsubscribed from Games4Mobile...we shall see!

by: niccijv
on: 30-04-2019 18:28

I received one of these this evening telling me the money would be taken from my account tomorrow! I also sent the STOP message, separately from their link, and received a confirmation text to say I have been unsubscribed... Where are this company getting our numbers from? Come on, Giffgaff, help your faithful customers to stop this happening. PS I've lodged a complaint with the PSA as suggested in one of the community comments about this issue