PAYPAL security guarantee

Security Policy when registering and paying through PAYPAL.com

Protection Against Theft

Your private account information is stored on a server that is protected both physically and electronically.
Physical Protection: servers are stored in a locked steel cage at one of Global Crossing’s highly secure Global Centers. Key security features provided by Global Crossing include:
Triple-redundant power, air and fire suppression systems
Four-spot seismically secured racks.
On-site staff monitoring and maintaining systems and security 24 hours a day, 365 days a year.
Special security features: biometric hand scanners, ramming bollards, laser sniffers, bulletproof glass.
Electronic Protection
Servers are NOT directly connected to the Internet. They sit behind a firewall, which ensures that private financial information is available only to messages from authorized computers.
Protection Against Electronic Eavesdropping
When you communicate with PayPal through your computer’s web browser, your interactions are automatically protected by Secure Sockets Layer (SSL). Before you register for Paypal service or before you login to your account, servers check to make sure you’re using one of the approved browsers. Paypal only supports browsers that use SSL 3.0 or higher.
Protection Against Misdirected Payments
As part of Paypal standard verification process, a 20-digit confirmation number is sent to every email address that users submit during registration or after logging in to their accounts. This confirmation number allows Paypal to verify that the person claiming that email address actually receives email at that address. This is important because people pay each other based on an email address as a unique identifier. Before transfering funds to a particular PayPal account, verification that the user who claims to possess the recipient email address has entered the 20-digit confirmation number takes place. If someone signs up with a particular email address but fails to enter the 20-digit confirmation number, that person will not be eligible to claim any funds paid to that email address.