Search This Blog

Wednesday, March 9, 2016

Hacker vs. Phisher: who does the law side with?


This morning I received an email claiming to be from PayPal saying that I needed to update my information. I followed the link and it was clearly a scam. The URL was not correct and the site "logged you in" regardless of what email and password you typed. Would it be illegal to write a program that repeatedly enters fake information to this site? I believe that it would make it harder for them to steal people's data by filling their database with bad info. I would not need to access the site in an unauthorized manner but just fill the web form out repeatedly. Would this be illegal? (also the site is hosted from France)"
Cost: Free
United States  |  Missouri  |  65804  |  Criminal Law
3/09/16, 8:17 am


I hate to answer a question without knowing the answer 100%, but you appear to be in murky territory. Their are hundreds of laws related to this and in reading the statutes related to this a creative prosecutor could find a way to prosecute you.
The first thing I recommend is you contact the authorities(Missouri Attorney General, FTC, etc.) and whoever you can to show that this is a scam, particularly Paypal.
Now to answer the legal question. The Computer Fraud and Abuse Act seems to cover this kind of behavior and harassment. So you are writing a program to generally hack them and provide them false information or to attack their forms and crash their system. Your intent here is to cause them harm and retaliate. This is a form of harassment using a computer. I would recommend against doing this. Here is a website with multiple links to the laws I have reviewed to answer your question.
and the DOJ manual on computer crimes
Richard Simons
5525 Rockhill Rd.
Kansas CIty, MO 64110
All information provided by this site, including summaries and articles on legal topics, is general in nature and provided for informational purposes only. This information is not intended as legal advice, and should not be taken as such. Legal advice involves an attorney’s application of legal knowledge and judgment to specific facts and circumstances presented by a client. Before providing specific advice, a lawyer may need to conduct legal research and/or obtain additional facts. Nonlawyers should therefore not draw conclusions about what may be legally required, permissible, or advisable based solely upon consultation of general sources of legal information, including this and other law firm websites, without first seeking appropriate legal advice.