PayPal is an e-commerce business allowing payments and money transfers to be made
through the Internet. Paypal serves as an electronic alternative to traditional paper methods such as checks and money orders.
A PayPal account can be funded with an electronic debit from a bank account or by a credit card. The recipient of a PayPal transfer can either
request a check from PayPal, establish their own PayPal deposit account or request a transfer to their bank account. PayPal is an example of a
payment intermediary service that facilitates worldwide e-commerce.
PayPal performs payment processing for online vendors, auction sites, and other commercial users, for which it charges a fee. It sometimes also
charges a transaction fee for receiving money (a percentage of the amount sent plus an additional fixed amount). The fees charged depend on the
currency used, the payment option used, the country of the sender, the country of the recipient, the amount sent and the recipient's account type.
In addition, eBay purchases made by credit card through PayPal may incur a "foreign transaction fee" if the seller is located in another country,
as credit card issuers are automatically informed of the seller's country of origin.
On October 3, 2002, PayPal became a wholly owned subsidiary of eBay. Its corporate headquarters are in San Jose, California, United States at
eBay's North First Street satellite office campus. The company also has significant operations in Omaha, Nebraska; Scottsdale, Arizona;
and Austin, Texas in the U.S.; India; Dublin; Berlin, and Tel-Aviv. As of July 2007, across Europe,
Paypal also operates as a Luxembourg-based bank.
Palpal History:
The current incarnation of PayPal is the result of a March 2000 merger between Confinity and X.com. Confinity was founded in December 1998 by
Max Levchin, Peter Thiel, Luke Nosek, and Ken Howery, initially as a Palm Pilot payments and cryptography company. X.com was founded by
Elon Musk in March 1999, initially as an Internet financial services company. Both Confinity and X.com launched their websites in late 1999.
Both companies were located on University Avenue in Palo Alto. Confinity's website was initially focused on reconciling beamed payments
from Palm Pilots with email payments as a feature and X.com's website initially included financial services with email payments as a feature.
At Confinity, many of the initial recruits were alumni of The Stanford Review, also founded by Peter Thiel, and most early engineers
hailed from the University of Illinois at Urbana-Champaign, recruited by Max Levchin. On the X.com side, Elon Musk recruited a wide
range of technical and business personnel, including many that were critical to the combined company's success, such as Amy Klement,
Sal Giambanco, Roelof Botha of Sequoia Capital, Sanjay Bhargava and Jeremy Stoppelman.
To block potentially fraudulent access by automated systems, PayPal used a system (see CAPTCHA) of making the user enter numbers from
a blurry picture, which according to Wikipedia.org they coined the Gausebeck-Levchin test.
eBay watched the rise in volume of its online payments and realized the fit of an online payment system with online auctions.
eBay purchased Billpoint in May 1999, prior to the existence of PayPal. eBay made Billpoint its official payment system,
dubbing it "eBay Payments," but cut the functionality of Billpoint by narrowing it to only payments made for eBay auctions.
For this reason, PayPal was listed in many more auctions than Billpoint. In February 2000, the PayPal service had an average
of approximately 200,000 daily auctions while Billpoint (in beta) had only 4,000 auctions. By April 2000,
more than 1,000,000 auctions promoted the PayPal service. PayPal was able to turn the corner and become the
first dot-com to IPO after the September 11 attacks.
Acquisition by eBay:
In October 2002, PayPal was acquired by eBay for $1.5 billion. PayPal had previously been the payment method of choice by more
than fifty percent of eBay users, and the service competed with eBay’s subsidiary Billpoint, Citibank’s c2it, whose service was
closed in late 2003, and Yahoo!'s PayDirect, whose service was closed in late 2004. Western Union announced the December 2005
shut down of their BidPay service but subsequently sold it in 2006 to CyberSource Corporation. BidPay subsequently ceased
operations on 31 December 2007. Some competitors which offer some of PayPal’s services, such as Wirecard, Moneybookers,
2Checkout, CCNow and Kagi, remain in business, despite the fact that eBay now requires everyone on its Australian and United
Kingdom sites to offer PayPal. Eventually eBay moderated its position, and mandated that sellers on eBay Australia offer
PayPal as one of the (but not necessarily the only) payment methods. These accepted payment methods include bank deposit,
cheques and money orders, escrow, and credit cards (processed by other than PayPal).
In January 2008, PayPal agreed to acquire Fraud Sciences, a privately-held Israeli start-up company with expertise in online
risk tools, for $169 million, in order to enhance eBay and PayPal's proprietary fraud management systems and accelerate the
development of improved fraud detection tools. In November 2008, the company acquired BillMeLater, an online payments
company offering transactional credit at over 1000 online merchants in the US.
PayPal’s total payment volume, the total value of transactions, was US$60 billion in 2008, an increase of 27 percent over the
previous year. The company continues to focus on international growth and growth of its Merchant Services division,
providing online payments for retailers off eBay.
Business today:
Currently, PayPal operates in 190 markets, and it manages over 184 million accounts (More than 73 million active accounts). PayPal allows
customers to send, receive, and hold funds in 19 currencies worldwide.
These currencies are the Australian dollar, Canadian dollar,
Chinese renminbi yuan (only available for some Chinese accounts, see below), euro, pound sterling, Japanese yen, Czech koruna,
Danish krone, Hong Kong dollar, Hungarian forint, Israeli new sheqel, Mexican peso, New Zealand dollar, Norwegian krone, Polish zloty,
Singapore dollar, Swedish krona, Swiss franc and U.S. dollar. PayPal operates locally in 13 countries.
Residents in 190 markets can use PayPal in their local markets to send money online. These new markets include Peru, Indonesia,
the Philippines, Croatia, Fiji, Vietnam and Jordan. A complete list can be viewed at PayPal's website.
PayPal revenues for Q1 2009 were $643 million, up 11 percent year over year. 42 percent of revenues in q1 2009 were from international markets.
PayPal's Total Payment Volume (TPV), the total value of transactions in Q1 2009 was nearly $16 billion, up 10 percent year over year.
In 2008, PayPal's TPV off eBay exceeded volume on eBay for the first time. PayPal's Total Payment Volume in 2008 was $60 billion
representing nearly 9 percent of global e-commerce and 15 percent of US e-commerce.
At an analyst day on March 11, 2009, eBay CEO, John Donahoe announced that PayPal could be a larger driver of revenue than the eBay
marketplaces business. RIM announced that PayPal will be the only payment mechanism for its Blackberry App World, which launched on April 1, 2009.
In China PayPal offers two kinds of accounts:
PayPal.com accounts, for sending and receiving money to/from other PayPal.com accounts. All non-Chinese accounts are PayPal.com accounts,
so these accounts may be used to send money internationally.
PayPal.cn accounts, for sending and receiving money to and from other PayPal.cn accounts.
It is impossible to send money between PayPal.cn accounts and PayPal.com accounts, so PayPal.cn accounts are effectively unable to make
international payments. For PayPal.cn, the only supported currency is the renminbi.
Although PayPal's corporate headquarters are located in San Jose, PayPal’s operations center is located near Omaha, Nebraska, where the
company employs more than 2,000 people as of 2007. PayPal's European headquarters are in Luxembourg and international headquarters
in Singapore. The company also recently opened a technology center in Scottsdale, Arizona, and Chennai India.
Online, the domain paypal.com attracted at least 260 million visitors annually by 2008 according to a Compete.com study.
Bank status:
In the United States, PayPal is licensed as a money transmitter on a state-by-state basis. PayPal is not classified as a bank in the
United States, though the company is subject to some of the rules and regulations governing the financial industry including
Regulation E consumer protections and the USA PATRIOT Act. On May 15, 2007, PayPal announced that it would move its European
operations from the UK to Luxembourg, commencing July 2, 2007 as PayPal (Europe) S.à r.l. & Cie, S.C.A. This would be as a
Luxembourg entity regulated as a bank by the Commission de Surveillance du Secteur Financier (CSSF), the Luxembourg equivalent
of the FSA. PayPal Luxembourg will then provide the PayPal service throughout the European Union (EU).
Safety and protection policies:
The PayPal Buyer Protection Policy states that customers may file a buyer complaint within 45 days if they did not receive an item or if the item they
purchased was significantly not as described. If the buyer used a credit card, they might get a refund via chargeback from their credit card company.
According to PayPal, it protects sellers in a limited fashion via the Seller Protection Policy. In general the Seller Protection Policy is
intended to protect the seller from certain kinds of chargebacks or complaints if seller meets certain conditions including proof of delivery
to the buyer. PayPal states the Seller Protection Policy is "designed to protect sellers against claims by buyers of unauthorized payments
and against claims of non-receipt of any merchandise". Note that this contrasts with the consumer protection they claim to offer.
This policy should be read carefully before assuming protection. In particular the Seller Protection Policy includes a list of "Exclusions"
which itself includes "Intangible goods", "Claims for receipt of goods 'not as described'" and "Total reversals over the annual limit".
There are also other restrictions in terms of the sale itself, the payment method and the destination country the item is shipped to
(simply having a tracking mechanism is not sufficient to guarantee the Seller Protection Policy is in effect). A class-action lawsuit
was filed against PayPal, days after the company's successful initial public offering.
Security
Security key:
In early 2006, PayPal introduced an optional security key as an additional precaution against fraud. A user account tied to a security
key has a modified login process: the account holder enters their login ID and password, as normal, but is then prompted to press the
button on the security key and enter the six-digit number generated by it. This two-factor authentication is intended to prevent an
account from being compromised by a malicious third party without access to the physical security key. However, the user (or malicious
third party) can alternatively authenticate by providing the credit card or bank account number listed on their account. Thus,
the PayPal's implementation does not offer the security of true two-factor authentication.
The key currently costs US$5.00 for all users with no ongoing fees. The option of using a security key with one's account is
currently available only to users registered in Australia, Germany, Canada, the United Kingdom and the United States.
mTAN:
It is also possible, according to Wikipedia, to use a Mobile phone to receive an mTAN (mobile Transaction Authentication Number) via SMS,
however this security scheme has known vulnerabilities.
Regulation:
In Europe, PayPal is registered as a bank in Luxembourg under the legal name PayPal (Europe) Sarl et Cie SCA, a company regulated centrally
by the Luxembourg bank authority, the Commission de Surveillance du Secteur Financier (CSSF) (note that all of the company's European
accounts were transferred to the PayPal's bank in Luxembourg on 2 July 2007). Prior to this move, PayPal had been registered in the
UK as Paypal (Europe) Ltd, an entity which was licensed as an Electronic Money Issuer with the UK's Financial Services Authority (FSA)
from 2004. This ceased in 2007, when the company moved to Luxembourg, however the Luxembourg entity is still regulated by the FSA,
as it is an entity from the European Economic Area which conducts regulated activities in the UK.
In the US, although PayPal has an extensive User Agreement, PayPal is not directly regulated by the U.S. federal government,
because it serves as a payment intermediary. The law is unclear as to whether PayPal is a bank, narrow bank, money services
business or money transmitter. PayPal could also be subject to state regulation, but state laws vary, as do their definitions of banks,
narrow banks, money services businesses and money transmitters. The most analogous regulatory source of law for PayPal transactions
comes from P2P payments using credit and debit cards. Ordinarily, a credit card transaction, specifically the relationship between
the issuing bank and the cardholder, is governed by the Truth in Lending Act (TILA) 15 U.S.C. §§ 1601-1667f as implemented by
Regulation Z, 12 C.F.R. pt. 226, (TILA/Z). TILA/Z requires specific procedures for billing errors, dispute resolution and limits
cardholder liability for unauthorized charges. Similarly, the legal relationship between a debit cardholder and the issuing
bank is regulated by the Electronic Funds Transfer Act (EFTA) 15 U.S.C. §§ 1693-1693r, as implemented by Regulation E, 12 C.F.R.
pr. 205, (EFTA/E). EFTA/E is directed at consumer protection and provides strict error resolution procedures. However, because
PayPal is a “payment intermediary” and not otherwise regulated directly, TILA/Z and EFTA/E do not operate exactly as written once the
credit/debit card transaction occurs via PayPal. Basically, unless a PayPal transaction is funded with a credit card, the consumer
has no recourse in the event of fraud on behalf of the seller.
Fraud:
Money transfers via PayPal create an inherent risk of fraud due to the impersonal nature of internet
commerce
and the gap in regulatory
treatment of PayPal transactions. The existing fraud protection regulations, EFTA/E and TILA/Z, do not apply to P2P account holders as
they do debit/credit card transactions outside of a P2P payment service.
If an unauthorized third party obtains and uses someone’s PayPal login information and completes a transaction using the accountholder’s
debit or credit card, EFTA/E and TILA/Z make PayPal responsible for the breach. There are, of course, fact specific exceptions to this rule.
One is if funds are illicitly withdrawn from a PayPal deposit account. In that situation, neither PayPal nor the bank is required to return
the funds, because the agreement between a consumer and PayPal makes those types of transactions “authorized”.
PayPal account holders’ private information is marginally protected under one federal law. Since PayPal is a “financial institution” under
the Gramm-Leach-Bliley Act (GLB), it cannot disclose its account holders’ nonpublic personal information to third parties unless account
holders opt in to those disclosures.
If an account is subject to fraud or unauthorized use, PayPal puts the "Limited Access" designation on the account. At this point,
the account holder must:
Log in
- Reset their password
- Develop a set of security questions (based in the hypothetical and not fact — e.g. "What is your favorite ice cream?"
not "What is your mother's maiden name?")
- Verify location by landline phone or by mail
Phishing:
PayPal has developed substantial anti-Phishing resources, for identifying and reporting phishing. PayPal encourages consumers to report all
phishing emails to them, to better equip them in fighting this phenomenon — spoof@paypal.com
References
- https://www.paypal.com/us/cgi-bin/webscr?cmd=xpt/UserAgreement/ua/USUA-outside#fees-policy
- Troy Wolverton (2002-10-03). "It's official: eBay weds PayPal". CNet. http://news.com.com/Its+official+eBay+weds+PayPal/2100-1017_3-960658.html. Retrieved on 2007-05-07.
- "FindlawDocumentation". 2006-12-31. http://contracts.corporate.findlaw.com/agreements/paypal/confinity.mer.2000.03.01.html.
- "Wired Article". 2006-12-31. http://www.wired.com/news/technology/0,1282,20958,00.html.
- "Wired Article". 1999-07-27. http://www.wired.com/science/discoveries/news/1999/07/20958.
- Roelof Botha - Venture Capitalist - Sequoia Capital
- PayPal: An alternate history according to Elon Musk
- Kane, Margaret (July 8, 2002). "eBay picks up PayPal for $1.5 billion". CNET News.com (CNET Networks). http://www.news.com/2100-1017-941964.html. Retrieved on 2007-11-13.
- eBay announcement 24 March 2008 09:00AM GMT
- http://pages.ebay.com.au/useprotection/changes.html eBay Australia announcing PayPal will be the exclusive payment method from 17 June 2008.
- http://pages.ebay.com.au/useprotection/changes.html eBay Australia announcing PayPal must be one of the payment methods accepted by sellers.
- http://pages.ebay.com.au/securitycentre/payment-options.html eBay Australia payment options, which include methods other than PayPal.
- http://tagedge.com/2008/01/28/paypal-acquires-fraudsciences/
- https://www.paypal-media.com/releasedetail.cfm?ReleaseID=346724
- https://www.paypal-media.com/documentdisplay.cfm?DocumentID=2260
- https://www.paypal-media.com/documentdisplay.cfm?DocumentID=2260
- http://files.shareholder.com/downloads/ebay/423749529x5130933x289176/f4b1d2f8-f565-408d-9b58-54a5280ab957/eBay_Q109_EarningsRelease.pdf
- PayPal corporate fact sheet https://www.paypal-media.com/documentdisplay.cfm?DocumentID=2260
- http://www.digitaltransactions.net/newsstory.cfm?newsid=2197
- http://www.blackberrynews.com/2009/03/31/blackberry-app-world-active-now-over-350-apps-online/
- Virgil Larson, "Local building, global growth: PayPal opens facility, plans to expand staff to keep up with business," Omaha World-Herald, 8 March 2007, 1D.
- PayPal attracts 260m visitors online
- Wolverton, Troy, FDIC decides PayPal's no bank, ZDNet News, 2002-03-13, accessed 2008-03-19
- Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism (USA Patriot Act) Act of 2001, Pub. L. No. 107-56, 115 Stat. 272 (2001)
- Stevenson, Tom, PayPal becomes a bank to fight off Google, Telegraph, 2007-05-16, accessed 2008-03-19
- Press release, PayPal Expands European Growth With Bank Charter And New European Headquarters, 2007-05-15, accessed 2008-03-19
- User Agreement for PayPal Service (it reads in part: "Credit card chargeback rights, if they apply, are broader than PayPal Buyer Protection")
- The in-line paypal URL in this section. Disputes between Buyers and Sellers - Buyer Protection Programs.
- eBay Security Center: PayPal Security Key
- PayPal Help Center
- "Investigators Replicate Nokia 1100 Online Banking Hack - Business Center - PC World". www.pcworld.com. http://www.pcworld.com/businesscenter/article/165326/investigators_replicate_nokia_1100_online_banking_hack.html. Retrieved on 2009-05-25.
- https://www.paypal.com/uk/cgi-bin/webscr?cmd=xpt/cps/general/LUXMigrationFAQ-outside
- http://www.businessweek.com/technology/content/jun2007/tc20070614_606853.htm?chan=technology_technology+index+page_top+stories
- http://www.fsa.gov.uk/register/firmBasicDetails.do?sid=99095
- http://www.telegraph.co.uk/money/main.jhtml?xml=/money/2007/05/15/cnpaypal15.xml
- http://www.fsa.gov.uk/register/firmBasicDetails.do?sid=189419
- https://www.paypal.com/us/cgi-bin/webscr?cmd=xpt/UserAgreement/ua/USUA-outside
- http://law.bepress.com/cgi/viewcontent.cgi?article=1153&context=expresso
- Margaret Jane Radin et al., Internet Commerce The Emerging Legal Framework 1174-1175 Foundation Press (2d ed. 2006)
- Margaret Jane Radin et al., Internet Commerce The Emerging Legal Framework 1176 Foundation Press (2d ed. 2006)
- Margaret Jane Radin et al., Internet Commerce The Emerging Legal Framework 1189-1190 Foundation Press (2d ed. 2006)
- Margaret Jane Radin et al., Internet Commerce The Emerging Legal Framework 1188 Foundation Press (2d ed. 2006)
- Security Center
- Helft, Miguel (2006-10-17). ""It Pays to Have Pals in Silicon Valley"". The New York Times. The New York Times Company. http://www.nytimes.com/2006/10/17/technology/17paypal.html.
- Wired News
- E-Commerce News: Security: Feds Investigating Fraudulent Katrina-Related Web Sites
- Youtube video of news report on eBay and PayPal aired March 2008 on an Australian news TV show called Today Tonight.
- "AboutPayPal.com Website". 2008-04-23. http://www.aboutpaypal.com/.
- "Draft Notice in respect of a notification lodged by eBay International A.G.". Australian Competition and Consumer Commission. 2008-06-12. http://www.accc.gov.au/content/trimFile.phtml?trimFileName=D08+54179.pdf&trimFileTitle=D08+54179.pdf&trimFileFromVersionId=833795. Retrieved on 2008-07-03.
- "CertCo Drops PayPal Patent Suit". 2008-04-23. http://www.internetnews.com/bus-news/article.php/1023191.
- "Settlement Agreement". 2004-06-11. http://paypalsucks.com/files/PayPalSettlementAgreement.pdf.
- "EBay Settles Patent Lawsuit With Tumbleweed Communications". 2008-04-23. http://www.crn.com/it-channel/18840325.
- "Stamps.com Asserts Breach of Contract Claim Against PayPal and eBay". 2008-04-23. http://www.stamps.com/company/news/20030625p/.
- "Comb v. PayPal Inc.". 2007-01-21. http://pub.bna.com/eclr/021227.htm.
- "Internet: PayPal Sues Bank One Over Patent Infringement". 2008-04-23. http://query.nytimes.com/gst/fullpage.html?res=9C0DEFD91F3DF932A35753C1A9659C8B63.
- Festa, Paul (2008-04-23). "AT&T sues eBay, PayPal over patent". http://news.com.com/2100-1032_3-5110038.html.
- "Spitzer Obtains Agreement With E-Payment Service". 2008-04-23. Archived from the original on a date that you can find on the archiveurl which makes requiring this field seem entirely nonsensical to me.. http://www.webcitation.org/5gd9LOmMk.
- Wikipedia.org