Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Candy Japan hit with credit card fraud

candyjapan.com

Post reply on HN
Print view View original

131–140 of 208 posts

Re: Candy Japan hit with credit card fraud

#131

Post by tokenizerrr »

stevoski wrote: post #51

I commented this on yesterday's jsbin article, and I'll write it again. Don't implement the payment processing code yourself. (And using Stripe is _still_ implementing it yourself - they supply only one part of the process.) Writing this code will take time that you are not using to develop and market your product. (cf opportunity cost). Your code will be buggy. Your code will be weak. Your code will not support the…

Just for the record, as a Dutch person, Holland refers to the two provinces North and South Holland and there is more to the country than just that. The Netherlands would be more accurate.

Re: Candy Japan hit with credit card fraud

#132

Post by germanier »

emodendroket wrote: post #128
germanier wrote: post #96

Earlier quoted context omitted.

> global audience That's the reason they recommended to use a payment gateway that implements all those local payment solutions. For example, in Germany you loose a lot of customers if you don't offer direct debit (ELV) as many don't own a credit card (and don't want to). > you typically don't have the same chargeback rights when using a banking service like iDEAL This heavily depends on the service. For example, the…

> That's the reason they recommended to use a payment gateway that implements all those local payment solutions. For example, in Germany you loose a lot of customers if you don't offer direct debit (ELV) as many don't own a credit card (and don't want to). I can't imagine wanting to give out my bank details to allow direct debit of my account to every online retailer I do business with. Weird.

Not too different from giving out your credit card number. I can reverse any direct debit online with two clicks and a second-factor authentication. Disputing a credit card transaction here on the other hand requires filling out a form, signing it on paper, sending it via post, and waiting for the response.

Re: Candy Japan hit with credit card fraud

#133

Post by ceejayoz »

Reason077 wrote: post #57
foota wrote: post #22

Earlier quoted context omitted.

I'm obviously not an expert, but is there a way to require someone to enter the pin that they use when they buy something in person? (I also found the following FAQ from the link you gave amusing "Why do we need Verified by Visa? Hasn’t Visa been taking my security seriously before?")

The actual authentication mechanism is left up to the card issuer. But using the card's PIN would be considered insecure due to the risk of malware/key-loggers intercepting it. My bank asks for three random characters from my online banking password (the same mechanism used to log in to my online banking) which provides enough security without risk of revealing the full password to key-loggers.

> My bank asks for three random characters from my online banking password...

That's terrifying, really. They shouldn't have any way of getting that data out of the hashed password.

Re: Candy Japan hit with credit card fraud

#134

Post by kohanz »

acveilleux wrote: post #126
kalleboo wrote: post #111

Earlier quoted context omitted.

In many countries (such as where I'm from, Sweden, or where I live now, Japan), debit cards and credit cards are interchangeable, and you can't even tell by looking at the card if it's debit or credit. They're both VISA or MasterCard branded, and what's backing it is only the business of the cardholder, not the merchant. I remember Maestro cards in Sweden as being for under-18's, and then when you become an adult you…

In Canada, a distinction is made because the fees on debit are much lower (comparable to cash handling costs) and the banks have put tremendous marketing efforts in pushing for debit cards and branding them "Interac." That said, the cards themselves use exactly the same technology, look the same and debit cards are usually Maestro/Cirrus or Visa/Plus compatible so we can do debit transactions in europe. The online ve…

Canadian here, and I find that most of my peers (30s) use their credit cards for almost everything and their debit cards collect dust. The reasons are several:

1) CCs offer rewards (travel, cash back), usually in the range of 2% of purchases

2) CCs offer insurance and extended warranties on some purchases.

3) CCs help you build a good credit rating, which is important for someone who intends to apply for a mortgage at some point.

4) CC offer superior protection to debit cards. Yes, CC fraud may be easy, but as the card holder you will almost never be on the hook.

I've had my CC compromised, the bank detected it immediately and issued me a new one. Never was there any question who would bear the cost of the 5-figures that the fraudster spent. My brother had his debit card compromised once and the story was completely different. The bank wanted him to prove that the fraudulent transactions were not his and he had to go to great lengths to do so.

My personal preferred order of payment is:

CC

Cash

Debit (last resort)

Re: Candy Japan hit with credit card fraud

#135

Post by pbhjpbhj »

Reason077 wrote: post #102
Maarten88 wrote: post #100

Earlier quoted context omitted.

> my card was practically useless That's because merchants pay 3% or more for a creditcard payment, and something like 0.8% for a local bank card payment (with the online equivalent iDeal). On top of that, there is much more risk accepting the creditcard with chargebacks, while the banks guarantee normal/iDeal payments. So most merchants here really dislike creditcard payments, it "costs them" much more. Of course I…

The EU is introducing a cap on credit card interchange fees of 0.3%, and 0.2% for debit cards. This is expected to lead to much lower fees for merchants that accept credit cards (and ultimately, consumers). The new regulations apply from 09 December 2015: https://www.gov.uk/government/news/credit-and-debit-card-fee...

What's with the EU and bringing in new financial regulations for Merchants around Christmas time??

Last year it was VATMOSS on 1 January (when lots of people are on leave and lots of purchases are made due to stores running sales, especially online).

ONS retail sales per week in the UK are £9B in December vs. £7B in April or June (last 12 months figures, http://www.ons.gov.uk/ons/rel/rsi/retail-sales/index.html).

Re: Candy Japan hit with credit card fraud

#136

Post by emodendroket »

germanier wrote: post #132
emodendroket wrote: post #128

Earlier quoted context omitted.

> That's the reason they recommended to use a payment gateway that implements all those local payment solutions. For example, in Germany you loose a lot of customers if you don't offer direct debit (ELV) as many don't own a credit card (and don't want to). I can't imagine wanting to give out my bank details to allow direct debit of my account to every online retailer I do business with. Weird.

Not too different from giving out your credit card number. I can reverse any direct debit online with two clicks and a second-factor authentication. Disputing a credit card transaction here on the other hand requires filling out a form, signing it on paper, sending it via post, and waiting for the response.

Yeah but in the meantime I still have my actual cash.

Re: Candy Japan hit with credit card fraud

#137

Post by umziehennachbar »

bemmu wrote: post #130
umziehennachbar wrote: post #124

1. How many sales would you lose if you required everyone to use PayPal everytime? 2. (What about Google cash? or Square cash?)

It's difficult to test, because by not having credit cards a lot of fake orders are now excluded, lowering the conversion ratio that way. So if I did a test of showing only PayPal to half of customers and PayPal + credit cards to half, the one with CC could win just because of the fake sales.

I guess what I mean is, "do people really need the credit card option? If you just demand they use PayPal and they want your unique service, then they'll find a way to pay".

Re: Candy Japan hit with credit card fraud

#138

Post by germanier »

emodendroket wrote: post #136
germanier wrote: post #132

Earlier quoted context omitted.

Not too different from giving out your credit card number. I can reverse any direct debit online with two clicks and a second-factor authentication. Disputing a credit card transaction here on the other hand requires filling out a form, signing it on paper, sending it via post, and waiting for the response.

Yeah but in the meantime I still have my actual cash.

After I make my two clicks for which you have several months time (only needed to do that once) the actual transaction is reversed immediatly. That means even if I notice it three weeks later, the bank pretends the direct debit never happened and is not included in any interest calculation etc.

Re: Candy Japan hit with credit card fraud

#140

Post by Someone1234 »

emodendroket wrote: post #128
germanier wrote: post #96

Earlier quoted context omitted.

> global audience That's the reason they recommended to use a payment gateway that implements all those local payment solutions. For example, in Germany you loose a lot of customers if you don't offer direct debit (ELV) as many don't own a credit card (and don't want to). > you typically don't have the same chargeback rights when using a banking service like iDEAL This heavily depends on the service. For example, the…

> That's the reason they recommended to use a payment gateway that implements all those local payment solutions. For example, in Germany you loose a lot of customers if you don't offer direct debit (ELV) as many don't own a credit card (and don't want to). I can't imagine wanting to give out my bank details to allow direct debit of my account to every online retailer I do business with. Weird.

It is identical to a credit card and cheque. That's exactly what you're doing in both cases.
Post reply on HN