World's Okayest Flaming Dumpster

Fortunately, banks no longer just ask 'did you make that transaction' they want to make sure you weren't scammed into making that transaction and 5mins after their call will give away all your money anyway.

This is an honest to goodness life saving movement and I cannot be happier banks are adopting it

Unfortunately, it meant I had to have the most embarrassing financial call of my life

-

Me: Ah yeah I was just trying to tip a tumblr blog

Cash: right and were you directed there by a Facebook link? An Instagram advert?

Me: no I was just on tumblr...on purpose

-

Caah: and this person asked you for money?

Me: oh no they just had a funny story, which happened to be about money and I thought, "wouldn't it be funny if I tipped them"

-

Me: * covering a reblog by reblog update on the adventures my mutual was having *

Cash: okay I don't think that can actually happen though..

Me: It might not have, but i was happy to tip them just because it was funny

-

Cash: and how well do you think you know this person?

Me: *considers explaining how much I know about a beloved mutual without ever knowing their name or face* ... I have no idea who this person is

UK legislation: Online Safety Act 2023

Brazil legislation: Digital Statute For Children And Adolescents

Apple App Store Age Verification

These are not tumblr specific policies. Tumblr is implementing age verification in response to legislative moves that were made months ago.

Tumblr is a failing social media site that has escaped death multiple times already; they do not have the social cachet to defy state regulatory agencies. We know they won't say no to Apple, either--the porn ban on tumblr was in response to Apple's crackdown on explicit content.

If you did not know this was happening, you were behind the curve. That is fine. You're caught up now. The next step is to link up with people in your country who are working to preserve privacy, to roll back these laws where they exist, and to prevent their passage where they do not. In the US the organization you want is Stop KOSA--in the EU you can start with Fight Chat Control.

You're being targeted by one of the cleverest scams going right now, and the reason it works is uncomfortable: the email genuinely came from PayPal.

The trick is in the subject line, not the email

When most people think "phishing email," they picture sketchy senders, broken English, and links to weird domains. This scam is the opposite. The email passes every authenticity check — SPF, DKIM, DMARC, all green. It comes from PayPal's actual mail servers. The fonts are right. The footer is right. The unsubscribe link works. If you forwarded it to a security expert and asked "is this really from PayPal?" they'd have to say yes.

So how is it a scam?

Scammers have figured out that PayPal lets anyone send small amounts of money to anyone else, and that PayPal will dutifully email the recipient a notification. The scammer sends you a payout of, say, one Hungarian forint — about a quarter of a cent. PayPal's system then automatically generates and sends you a real, legitimate, fully-authenticated email confirming the transaction.

Here's the catch: the email's subject line is whatever the scammer typed when they set up the payout. PayPal doesn't sanitize it. So they write something terrifying like "Pending charge of USD 987.90 — call this number with questions" and PayPal's servers cheerfully deliver that subject line straight to your inbox, wrapped in a perfectly legitimate-looking notification.