Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Candy Japan hit with credit card fraud

candyjapan.com

Post reply on HN
Print view View original

171–180 of 208 posts

Re: Candy Japan hit with credit card fraud

#171

Post by nulltype »

stevoski wrote: post #51

I commented this on yesterday's jsbin article, and I'll write it again. Don't implement the payment processing code yourself. (And using Stripe is _still_ implementing it yourself - they supply only one part of the process.) Writing this code will take time that you are not using to develop and market your product. (cf opportunity cost). Your code will be buggy. Your code will be weak. Your code will not support the…

How is FastSpring different from using Stripe.js or Checkout? Both claim "automatic fraud detection".

Re: Candy Japan hit with credit card fraud

#172

Post by scrabble »

kohanz wrote: post #134
acveilleux wrote: post #126

Earlier quoted context omitted.

In Canada, a distinction is made because the fees on debit are much lower (comparable to cash handling costs) and the banks have put tremendous marketing efforts in pushing for debit cards and branding them "Interac." That said, the cards themselves use exactly the same technology, look the same and debit cards are usually Maestro/Cirrus or Visa/Plus compatible so we can do debit transactions in europe. The online ve…

Canadian here, and I find that most of my peers (30s) use their credit cards for almost everything and their debit cards collect dust. The reasons are several: 1) CCs offer rewards (travel, cash back), usually in the range of 2% of purchases 2) CCs offer insurance and extended warranties on some purchases. 3) CCs help you build a good credit rating, which is important for someone who intends to apply for a mortgage a…

On the other side of the fence, also Canadian, my debit card has been compromised many times. Bank always shuts it down immediately and lets me know, then returns the money. I have never been asked to prove anything. Usually they ask me to double check and see if any other charges than the ones they caught were fraudulent.

This has been as simple as someone using a copy of my card to buy candy and video games, something I could have done but didn't in this case.

Really impressed with the services of my banks when it's come to debit fraud.

Re: Candy Japan hit with credit card fraud

#173

Post by nulltype »

2muchcoffeeman wrote: post #79

Couldn't you do a preauth on the cards and then completion when you are ready to ship? At least then you don't get hit with chargebacks.

Last time I talked with a credit card company, they wouldn't even let me file a chargeback until 30 days after the transaction. How would this stop chargebacks?

Re: Candy Japan hit with credit card fraud

#174

Post by kohanz »

scrabble wrote: post #172
kohanz wrote: post #134

Earlier quoted context omitted.

Canadian here, and I find that most of my peers (30s) use their credit cards for almost everything and their debit cards collect dust. The reasons are several: 1) CCs offer rewards (travel, cash back), usually in the range of 2% of purchases 2) CCs offer insurance and extended warranties on some purchases. 3) CCs help you build a good credit rating, which is important for someone who intends to apply for a mortgage a…

On the other side of the fence, also Canadian, my debit card has been compromised many times. Bank always shuts it down immediately and lets me know, then returns the money. I have never been asked to prove anything. Usually they ask me to double check and see if any other charges than the ones they caught were fraudulent. This has been as simple as someone using a copy of my card to buy candy and video games, someth…

To be fair, my brother's incident was quite a few years ago by now, so it's quite possible that the response has improved.

Re: Candy Japan hit with credit card fraud

#176

Post by jasontan »

benmmurphy wrote: post #146
mootothemax wrote: post #30

Earlier quoted context omitted.

>I'm not sure which one to go with. How involved is it to integrate these? I really like https://siftscience.com . The important thing is to not over-think things; it's rarely that case that you truly, honestly, really need real-time automated fraud detection. Start with implementing the absolute bare minimum. You'll then receive emails from e.g. Sift when a bad user is identified, and you can manually refund the tra…

I'm thinking about integrating with siftscience. How trustworthy are they? It looks like you need to send them information about your users and give them script access on your page in order to help identify fraudulent transactions. (which is completely reasonable but still requires a lot of trust on our part)

Hi Ben, CEO of Sift Science here. Happy to share what we do to secure and protect your data - jason at siftscience dot com

Re: Candy Japan hit with credit card fraud

#177

Post by milesvp »

imjk wrote: post #152
fredleblanc wrote: post #104

I also had something like this happen on a site I built for my wife's work's site, a Boys & Girls Club[0]. I had a donation button that let people make an open donation to the club. It's such a tiny site with little traffic, but apparently the SEO must be decent because somehow it got targeted by people appearing to come through Brazil and Poland. Suddenly one day, hundreds of donation attempts. Checking the failed t…

How can they not be willing to pay a transaction fee from even PayPal for donations? Seems their options right now is to take donations via a service like Paypal with a transaction fee, or just take no donation.

They may actually not have a choice. My wife is a lawyer who does a lot of work with non-profits, and maintaining non-profit status can require jumping through a lot of legal hoops. A quick google suggests GBCA is a 501(c)3 non-profit, so it's very possible that adding a gateway in front of a donation that is tax deductible may create some legal risk (real or perceived), or be outright not allowed by current laws.

Re: Candy Japan hit with credit card fraud

#178

Post by stevoski »

tokenizerrr wrote: post #131
stevoski wrote: post #51

I commented this on yesterday's jsbin article, and I'll write it again. Don't implement the payment processing code yourself. (And using Stripe is _still_ implementing it yourself - they supply only one part of the process.) Writing this code will take time that you are not using to develop and market your product. (cf opportunity cost). Your code will be buggy. Your code will be weak. Your code will not support the…

Just for the record, as a Dutch person, Holland refers to the two provinces North and South Holland and there is more to the country than just that. The Netherlands would be more accurate.

Sorry about that. In future I'll be more careful to write The Netherlands.

Re: Candy Japan hit with credit card fraud

#179

Post by caffeinewriter »

scurvy wrote: post #153

The one-time card numbers generated by the old AMEX Blue system were great for shopping on sites you didn't trust. Too bad that they dumped that and the card reader system around 2002-2003? I really liked it and felt much more confident using it. Seems like it would have cut down on fraud a lot more than many systems in use. That said, I really don't know why anyone would want to try and write their own payment integ…

I just started using Blur by Abine, which allows something similar. (Basically, you can fund prepaid cards to use on sites rather than giving out your real card) not an outright endorsement. I haven't used them for long enough to give a definitive answer on if they're good, but it costs $40/year plus $2 for each "masked card".

So far it's worked for me.

I definitely agree no Dev should write their own gateway. There are great ones out there who are developed by people who are paid to do nothing but that.

Post reply on HN