Re: How hard is it to trace the source?
Criminals use breach dumps like the ones from the Equifax breach to attempt to verify bogus PayPal accounts, that make micro payments to verify. If the bank or victim doesn't notice, then they take out more money until they are blocked. My bank tells me they cannot trace these to an individual at PayPal, so there is no way to magically trace to identify anyone that is generally doing such transfers, unless, perhaps, they are intrabank transfers by another account holder in the same institution.
Biting the hand that feeds IT
