Leave a legacy.

Require 2 factor authentication to sign up for payforit texts

By: andy69 | 12-08-2018 18:00

A lot of people are asking about being charged for payforit texts when they didn't subscribe to them in the first place. And how to stop further charges and get your money back. One way would be to require that the initial text is not charged for but is replaced with a text asking you to authorise the subscription. If you want to receive them, then you just follow the instructions in the text to authorise it. It could be follow a link or reply by text. After authorisation, you receive the original text and are charged. If you don't authorise it, you just ignore and no charges are applied.

-

Comments

by: peterg92
on: 23-05-2019 11:18

Supported

by: timbav
on: 09-05-2019 17:03

This should be mandatory for all network providers.

by: muddycalhoun
on: 09-05-2019 08:48

Ig what I read from muggles in contribute this morning is bona fide congratulations are due to andy69 (and anyone else who may have suggested this coincidentally)

Going to be implemented 11 5 19 it said !!

by: andy69
on: 09-05-2019 11:53

What is being implemented 11th May 2019 is nothing to do with giffgaff but the rules for payforit are changing so the merchant has an extra step to perform. However, the people behind the payforit scams have been shown to claim that people have subscribed when they haven't. I don't see any reason why they couldn't also claim people have gone through the extra step required from 11th May. Rather than the merchant policing this, it should be the network. IE giffgaff should ensure that their customers have subscribed. That's why the initial confirmation text should come from giffgaff rather than the merchant.

by: msmon55
on: 07-05-2019 15:49

GG really need to either implement two step verification or better still give its members the ability to simply opt out of all premium rate services. Surely GG have a duty of care to its members? And if GG are in fact receiving a commission from these scam premium rate companies that must surely mean that GG are implemented in committing fraud?!!!

by: raiele
on: 18-05-2019 10:30

Absolutely agree

by: andy69
on: 07-05-2019 15:00

I see this has been marked as implemented. I don't see how as I received a message from @holly_bc at 07-05-2019 13:29 saying ...

What i'l do is, i'm going to change the idea to Future Thinking as it's something we'd be interested in doing in the future, but right now, it's not something we'd be able to implement due to network limitations and our current project load. I've spoken to a few different product owners and it's definitely something they'd love to get their teeth stuck into. So it'll be something thats on our back burner, but something we'll definitely look at implementing soon if we can!

Edited
by: andy69
on: 07-05-2019 15:30

@holly_bc has kindly put this back into "we're looking into it".

by: mutley01932
on: 06-05-2019 12:51

Just been scammed by Mainstream Games £4.50 taken from my account, never given permission. It appears it goes via Payforit service that giffgaff earn commission from. giffgaff agents tell me no refund and wash their hands of it basically. HANG ON A MINUTE!! giffgaff meant to be run by its members so we demand that 2 factor authentication is introduced (as done by EE) to protect us. Header text on this page says "giffgaff looking into it" DATED AUGUST 2018!!!

Edited
by: johnb21
on: 16-05-2019 17:04

The same has just happened to me. GiffGaff need to be introducing 2FA immediately to stop this. Maybe after 7 years with GG I'll take a look at EE...

by: mrlar48
on: 05-05-2019 10:33

stop this and get it sorted payforit scams are giffgaff a responsibility and they will gain a bad reputation for allowing this to happen

by: chrissyquinn
on: 04-05-2019 17:28

I've had one of these txts by nexgen saying they will charge me 4.50 do they try and take this from your phone credit or ba k account? I am pay as you go just on a goody bag so presumably they cant take money from me unless they have access to my bank account which they shouldn't have.

by: muggles708
on: 02-05-2019 21:23

Reply received this evening on Twitter from GiffGaff:

Hi there. From May 11th, Payforit merchants will have to make sure that a confirmation text is sent to your mobile before completing the subscription, which will detail the charge and what it's for. This may ask you to put a PIN into the web site to confirm your subscription.

Well done Andy69 and everyone else who has supported this!

by: andy69
on: 02-05-2019 22:24

Although that sounds like a step in the right direction, it looks like it's nothing to do with the network but is sent by the merchant. If that's the case, I wouldn't be surprised if this does nothing to prevent these scams as the companies involved seem to be unscrupulous. They currently claim that people subscribe when they don't. I don't see why they wouldn't just claim that people have gone through the process of entering the PIN. What I expect is the 2FA to be done by the network. IE money would only be transferred to the merchant once the network has received confirmation from their customer that they have subscribed. In my idea, I was expecting that the initial text would be replaced by one from giffgaff to confirm subscription. If the customer ignored the message, then no charge would be made. Consider the example when buying goods from a website: often, you are presented with an authorisation screen from the payment provider to confirm the credit card payment. IE it's independent from the website selling goods. In a similar way, I'd expect the merchant not be involved in the authorisation of debits to my account balance.

by: henryscat
on: 02-05-2019 19:36

Another call for 2-factor PLEASE!


Having never had any problem with this sort of thing before, I got my first scam text from PayForIT / Wapstar today:

FreeMsg: Thank you for subscribing
to Wapstar Content for £4.50 every
week from Wapstar until you text
STOP too 83463 HELP? 03300535841.
Charge applied to mobile phone bill.

I didn't see the Watchdog episode that supposedly covered this last night, but I very much doubt this is a coincidence! Nice one...