[URGENT] Skype Support Account Security Issue - CA... - Skype Community

Hello,

I'm doing this as a warning to the Skype Community. Did you know that anyone can steal YOUR Skype account with just the following?

- 3-5 of your contacts on skype

- 1 email you've used on skype at any point

- your first and/or last name

That's it. It's extremely simple. My skype was stolen 6 times in one day. Skype support never saw anything wrong with that. It was stolen around 3pm on the first day. I recovered it through skype support with just the information listed above within 30 minutes. In less than 2 hours after recovering my account, it was stolen by another person. The skype then was recovered by a friend of mine while I was at dinner. When I got back and changed the info to my own again, it was stolen later that evening. Another friend recovered it for me and tried to keep the scammer out of my account. 

Due to my account being stolen (not hacked) through skype support (because Skype support didn't verify if the person owned the account or not, just wanted those 3 points mentioned above) my account was used to scam people out hundreds of dollars along with damaging my reputation for my product's security due to thinking I had low security on my skype account or email address, when in reality, it was Skype Support's fault my account was stolen, multiple times, and had nothing to do with End-users (me in this case). 

Now, before they say, no this is not their policy or they have great support that focuses on security blah blah blah, it's just their bs. I've got plenty of proof and have recorded all my chats with skype support, which prove the support staff are not verifying account owners appropriately. 

Picture 1: http://i.imgur.com/eWaDMTI.png (Some personal info removed)

- They did at least ask me if I had purchased premium in the past on that time, however, it wasn't even me, it was a picture from the chat my friend had with support while I was asleep, he just used my name, email, 5 people he knew I had added on skype since I had over 800 contacts, and a random month (he used march 2013, which I was not a skype premium customer at that time and haven't been since last November).

Picture 2: http://i.imgur.com/HSvS5of.png (Partial Names blacked out)

- This chat he was trying to alert support about it, they didn't really pay attention or understand what he was saying.

My chat with skype support recently on this issue:

Part 1: http://i.imgur.com/IkZj4a7.png

Part 2: http://i.imgur.com/n4nNvtd.png

Shortly after the conversation I got the email I was waiting for, it was supposed to be their managment / "a higher department" contacting me about the issues. However, instead I got this email:

http://i.imgur.com/aUbOFdS.png 

Which clearly is not what I asked for them to do in the live chat with Skype support. I told the agent in the live chat that I already got my account back and was informing them of their mistakes hoping to prevent this issue in the future from other people getting their skype accounts stolen and to prevent mine from being stolen again. Not only that, but my account is not currently suspended nor was it when the support agent check it, I logged in a few minutes after that and was able to use it still and am able to at this very moment even though I've emailed two more requests to have it suspended.

This issue has cost me time, money, and hurt my business reputation as well as I did some support for customers through skype, the skype account was being used to scam people out of money by the person who had stolen my skype because Skype Support did NOT verify ownership of the account appropriately. 

Why does skype NOT have ANY of the following?

- Security Questions

- 2-factor Authentification

- Good Support that looks into these issues

- Support that can understand plain English and follow through with the request correctly instead of mistaking the my clear request for something different. 

- 24/7 support

- A real security policy to actually verify ownership of accounts

Due to this expirence I am trying to alert anyone and everyone I can that uses skype and trying to get Skype to actually change their policy to secure accounts. Even though there are many other issues with skype, let's just tackle one at a time. It's bad enough that anyone can get your real IP address by just knowing your skype username, now they can steal your account by just knowing a little bit of information about you.

Hopefully this will bring attention to the issue and prevent issues like this from harming others like it has done to me.

Kind Regards,

Dylan

@TibitXimer - https://twitter.com/TibitXimer