I don't necessarily think this has anything to do with Paypal. I've had 4 transaction from "Paypal Galer Corp" since December on my Mastercard - and it's not a card I registered with Paypal to the best of a failing memory. Barclaycard (UK) are treating this as a 'normal' card fraud, so now I too have to cut up this card and wait for another one.
When are the Internet Trading companies going to wake up and start using Secure Virtual Identity, such as Identity Commons (see
****://2idi.com/ )?
XRIs (Extensible Resource Identifiers) address a longstanding problem on the Internet: how to have a persistent, portable, privacy-protected identifier for any resource, from a person to a company to an application to a concept.