Twitter has begun testing a new feature called “Tip Jar” that allows Twitter users to send tips, or money, to select profiles, but there are some security concerns that have surfaced.
Twitter’s ‘Tip Jar’ May Reveal PayPal Registration Address
Twitter has launched a “Tip Jar” feature for users of its Android and iOS apps who have their preferred language set to English.
The Tip Jar can be used to send money to anyone, but only a handful of groups are currently eligible to receive it.
The Tip Jar, a money thrower, allows anyone to send money, but only a handful of groups are currently eligible to receive it, and “we plan to expand to more languages,” Twitter said in a blog post.
How to check if Tip Jar is received
To check if Tip Jar is enabled, you can see the “Tip Jar” icon next to the “Follow” button on the account’s profile page.
Tapping the icon will display a list of payment services and payment platforms, and selecting a payment service will allow you to support the selected amount
The services currently available are Bandcamp, Cash App, Patreon, PayPal, and Venmo, and Twitter will not be an intermediary.
In addition, Twitter states that it will not receive any fees, but payment platforms may charge a minimal transaction fee.
However, shortly after this feature was released, it was pointed out that due to the way PayPal works, users may not be aware that their PayPal address is known to the person to whom they gave the money.
How to solve Paypal address disclosure
But there is a public solution to this address problem, and you can choose not to publish it by selecting “No address needed” in the Shipping Address form field before sending money via Twitter Tip Jar.
Twitter has also updated the description of the Tip Jar to disclose that other applications, such as PayPal, may share personal information between the person sending and receiving the Tip Jar. https://twitter.com/TwitterSupport/status/1390451333602422787
Possible refund request scam
What happens if you tip a Twitter user using Tip Jar and then file a “refund” request regarding the payment? This raises the question: What happens if you give a tip to a Twitter user using Tip Jar and then file a “refund” regarding the payment?
Payment platforms provide ways to dispute payments for a variety of reasons, such as receiving a defective product or not receiving adequate service, but in this PayPal case, if the sender of the throwaway money files a refund after giving someone a Tip Jar, the recipient of the Tip Jar, the recipient would have to pay a $20 refund fee and a payment processing fee in addition to the refund of the Tip Jar, a concern that has been raised.
Information security journalist Brian Krebs points out that scammers can send a “Tip Jar” several times, and by disputing it, they can force the recipient to pay, effectively reversing the flow of money.
It is unclear what policies PayPal and Twitter will put in place to prevent malicious activity from abusing the newly introduced Tip Jar feature.
But even though the preferred language of the account/app is set to English, some app users, including authenticated accounts, are unable to use the Tip Jar, so it seems that Tip Jar is not always available.
Comments