Categories: Open Source

PayPal Account Verification for Expense Payouts

TLDR ; We are rolling out an important improvement to how payees connect their PayPal accounts when submitting expenses on Open Collective. This update affects all fiscal hosts that use PayPal to pay expenses. Payees must now connect their PayPal account instead of typing an email. Open Collective gets their verified identity directly from PayPal. Legacy PayPal accounts registered in the past are flagged as unverified. Hosts can see a new verified/unverified badge, PayPal identity details on expenses, and security check alerts for unverified accounts or name mismatches.

Background 

Until now, payees who selected PayPal as their payout method simply typed in a PayPal email address. This created two problems: 
  1. No proof of ownership. There was no way for Open Collective or fiscal hosts to confirm that the person submitting the expense actually owned the PayPal account they provided. This had KYC implications for hosts managing large volumes of payments.
  2. Risk of typos. A single character mistake in a PayPal email address would not be caught automatically, and could result in a failed or misdirected payment.
To address both issues, we have introduced PayPal OAuth-based account verification for expense payout methods.
 
 

What is changing for Payees

When a payee selects PayPal as their payout method for an expense, they are now redirected to PayPal to authorize Open Collective to confirm their account identity. Open Collective then receives their verified name and email address directly from PayPal.
Payees who previously saved a PayPal email address (before this feature was released) will see their payout method marked as unverified, with a prompt to reconnect it through the PayPal authorization flow.
 

What is changing for Organizations

You will notice two new things in your expense workflow:
 
1. PayPal verification status and identity information in the payee section
When reviewing an expense that uses a PayPal payout method, you will now see:
 
  • A Verified badge if the payee went through the PayPal authorization flow. You will also see the identity information received from PayPal: their name, email address, and country:
  • An Unverified badge if the payout method was a legacy email entry without OAuth confirmation:
Note on country: The country field currently shows “Unknown“. We have a pending application with PayPal to gain access to the scope that provides this information. Once approved, the country will populate automatically for newly verified accounts.

2. New PayPal-related security checks
Expenses that use a PayPal payout method will now generate additional security checks visible in the Security Checks panel (the shield icon on each expense):
 

  • PayPal account verified (green): The payee connected their PayPal account through the authorization flow and identity was confirmed.
  • PayPal account unverified (red): The payout method was saved without OAuth confirmation. Consider asking the payee to update their payout method before processing payment.
  • PayPal name mismatch (red): The name on the connected PayPal account does not match the legal name on the payee’s Open Collective profile.

What’s Coming Next

  • Enforce verification. We are evaluating a platform-wide or configurable host policy that would require payees to verify their legacy PayPal account, configured before the introduction of this feature.
  • Country information. Once PayPal grants the required scope, country will be populated automatically for verified accounts.
cmsguru

Share
Published by
cmsguru

Recent Posts

The HTML representation of the index API is now frozen

PyPI has adopted PEP 833, which "freezes" the HTML representation of the index API, which…

2 days ago

Releases now reject new files after 14 days

The Python Package Index (PyPI) now rejects new files being uploaded to releases that are…

3 weeks ago

Planned Updates to the PyPI User Interface

Over the next few months, we will be rolling out changes to the PyPI user…

3 weeks ago

Release: Sidebar Reorganization – Part 3 – “The Switch”

Highlighting the next stage in our sidebar reorganization campaign! We are still primarily focusing on…

2 months ago

SMS Email Gateway List

Source: SMS Email Gateway ID Provider Country Email Format Notes Id Provider Country Email Address…

3 months ago

PyPI has completed its second audit

In 2023 PyPI completed its first security audit, and I am proud to announce that…

4 months ago

This website uses cookies.