PayPal address hacked

Hello,

I've been running OC 1.5.6.4 for more than 5 years and never had an issue. In the last month, however, I've had at least 4 customers submit orders that went into the missing orders folder (meaning no payment received) but they received a PP confirmation email. Upon looking at the PP email forwarded to me by the customer, it shows the payment was sent to a fraudulent PP address one letter different than mine. So someone has been able to hack my site and redirect the PP standard payment extension to their own address which has been shut down. This is only happened a handful of times out of 200+ orders. How do I stop this?

Garret

Verify your PayPal transactions and your PayPal transaction logs on OC. I would also suggest the use of Fraud Labs Pro extension that is now integrated in the OC on more recent OC versions. As an alternative, you could look for extensions on the Marketplace that may suit your needs.