Leave a legacy.

Require 2 factor authentication to sign up for payforit texts

By: andy69 | 12-08-2018 18:00

A lot of people are asking about being charged for payforit texts when they didn't subscribe to them in the first place. And how to stop further charges and get your money back. One way would be to require that the initial text is not charged for but is replaced with a text asking you to authorise the subscription. If you want to receive them, then you just follow the instructions in the text to authorise it. It could be follow a link or reply by text. After authorisation, you receive the original text and are charged. If you don't authorise it, you just ignore and no charges are applied.



by: chrissyquinn
on: 04-05-2019 17:28

I've had one of these txts by nexgen saying they will charge me 4.50 do they try and take this from your phone credit or ba k account? I am pay as you go just on a goody bag so presumably they cant take money from me unless they have access to my bank account which they shouldn't have.

by: muggles708
on: 02-05-2019 21:23

Reply received this evening on Twitter from GiffGaff:

Hi there. From May 11th, Payforit merchants will have to make sure that a confirmation text is sent to your mobile before completing the subscription, which will detail the charge and what it's for. This may ask you to put a PIN into the web site to confirm your subscription.

Well done Andy69 and everyone else who has supported this!

by: andy69
on: 02-05-2019 22:24

Although that sounds like a step in the right direction, it looks like it's nothing to do with the network but is sent by the merchant. If that's the case, I wouldn't be surprised if this does nothing to prevent these scams as the companies involved seem to be unscrupulous. They currently claim that people subscribe when they don't. I don't see why they wouldn't just claim that people have gone through the process of entering the PIN. What I expect is the 2FA to be done by the network. IE money would only be transferred to the merchant once the network has received confirmation from their customer that they have subscribed. In my idea, I was expecting that the initial text would be replaced by one from giffgaff to confirm subscription. If the customer ignored the message, then no charge would be made. Consider the example when buying goods from a website: often, you are presented with an authorisation screen from the payment provider to confirm the credit card payment. IE it's independent from the website selling goods. In a similar way, I'd expect the merchant not be involved in the authorisation of debits to my account balance.

by: henryscat
on: 02-05-2019 19:36

Another call for 2-factor PLEASE!

Having never had any problem with this sort of thing before, I got my first scam text from PayForIT / Wapstar today:

FreeMsg: Thank you for subscribing
to Wapstar Content for £4.50 every
week from Wapstar until you text
STOP too 83463 HELP? 03300535841.
Charge applied to mobile phone bill.

I didn't see the Watchdog episode that supposedly covered this last night, but I very much doubt this is a coincidence! Nice one...

by: shazzyq1
on: 01-05-2019 20:21

I received a text today from Nexgen saying I had subscribed and they were going to take £4.50 a week from me. ????

I have never heard of this company nor subscribed for anything. I have sent the stop text and did get a reply stating I had unsubscribed from it so now hoping this will be the end of it.

I think giffgaff should have some sort of protection against this, where do they get our phone numbers from? I don’t give mine out. If we have done everything we can from our end to stop these scammers withdrawing our money then at least giffgaff should refund it.

by: johnrmason
on: 01-05-2019 20:08

After seeing Watchdog tonight I'm worried that there is no verification to protect Giffgaff users against fradulent app subscription. Is there anything that can be done - eg 2 factor auth of some sort?

by: andy69
on: 01-05-2019 19:49

Good to see BBC watchdog highlight this issue tonight.

by: johnrmason
on: 01-05-2019 20:06

Can I add my voice to this - something like 2 factor auth needed for this

by: niccijv
on: 30-04-2019 18:24

Please implement this! Just had to complain about being subscribed for a premium service that I definitely did not subscribe to! SCAM!!

by: yummywerewolfhunter
on: 29-04-2019 16:31

I feel this should be implemented as soon as possible.

by: eugeneboiko
on: 28-04-2019 22:33

It is evident from the commentary here and elsewhere that the payforit scam is very widespread. "We're looking into it" doesn't seem to be an appropriate response from GG. "We're doing it" would be, preferably very soon!

by: beenbop
on: 26-04-2019 15:16

Reading many of the linked comments I can see that giffgaff are ignoring this problem or at best struggling to impliment a solution. If I get hit again I will have to move back to O2 were I can get the barring facility. What a shame.