After guessing her dad's PayPal password, the U.K.-based girl splashed out over $1K for the trip of her dreams.

By Maressa Brown
November 09, 2017
Disneyland Paris
Credit: Alliance/shutterstock

A 9-year-old girl from the U.K. named Susan Wilson is making headlines for figuring out her dad's PayPal password and "accidentally" booking the vacation of her dreams -- to Disneyland Paris! As a result, her father was out more than £1,000 (which is a little more than $1,300). Oof!

While her father Ian Wilson slept, Susan reportedly used her dad's phone to spend £400 on flights and a hotel gift card, £214.08 on a VIP trip up the Eiffel Tower, and £391.84 on Disneyland Express train and park tickets all for the next day, according to the Mirror. The site notes that the father's phone didn't have a lock code. (Even if he did, a child who could figure out a PayPal password may very well be adept at unlocking the phone in the first place, right?)

Three days later, Wilson saw the money had been taken out of his account. Susan's mother Tracey told the Mirror, "At first we had no idea where the money had gone and it wasn't until Ian checked his [phone] history that we found out."

Though some parents might freak, it sounds like the Wilsons understood their daughter was out of her depth. "I don’t think Susan really realizes the enormity of what she had done," he told The Sun. The little girl apologized and promised to help pay her father back.

Susan also spoke to The Sun, sharing, "I don’t know how I did it. I just like messing about with Dad’s phone. I don’t know where Paris is or what the Eiffel Tower is."

In an attempt to reverse the transactions, Wilson contacted Yorkshire Bank, PayPal, and the travel companies Susan had used to book the trip. They initially refused to refund the money, given that it wasn't a case of fraud.

"We were completely open and honest to the bank and PayPal about what happened," Ian told the Mirror. "We never went on the holiday. A £1,000 is a lot of money for us and we just wanted it back."

PayPal actually did refund the family the total, labeling the incident "friendly fraud." What a relief.

And going forward, in an attempt to avoid a similar incident, the family plans to keep Ian's phone password-protected -- and out of their 9-year-old's clutches!