Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Candy Japan hit with credit card fraud

candyjapan.com

Post reply on HN
Print view View original

181–190 of 208 posts

Re: Candy Japan hit with credit card fraud

#181

Post by driverdan »

fredleblanc wrote: post #104

I also had something like this happen on a site I built for my wife's work's site, a Boys & Girls Club[0]. I had a donation button that let people make an open donation to the club. It's such a tiny site with little traffic, but apparently the SEO must be decent because somehow it got targeted by people appearing to come through Brazil and Poland. Suddenly one day, hundreds of donation attempts. Checking the failed t…

Consider adding Bitcoin donations. The fees are very low and the Bitcoin community tends to be generous.

Re: Candy Japan hit with credit card fraud

#182

Post by kweks »

We ran an online store selling merchandise for a very large mobile-game vendor, so naturally we experienced these types of fraud attempts.

For us, there's one killer technique. Detect fraud however you want to / can (this can be a mix of heuristic data from your stats, third party, or whatever you want) - but when you detect it - don't decline the user.

Send them to a fake purchase confirmation page.

Suddenly they'll be getting 100% success from your site, and they'll drop you immediately.

On the backend, put the transaction to manual approval, so if it IS a legitimate client, when they email you, you can manually approve the order.

Over the years, as others have pointed out, detection methods change, but using the above technique invalidates their reasons test with your site. (very similar to Mailinator's technique for people scraping their site.. http://mailinator.blogspot.fr/2011/05/how-to-get-gmailcom-ba... )

Re: Candy Japan hit with credit card fraud

#183

Post by greedo »

pc86 wrote: post #154
Maarten88 wrote: post #83

Earlier quoted context omitted.

Living in Holland, where everyone does online transactions with iDeal, I find it hard to understand why the rest of the world is using credit card payments at all, for anything. It is massively insecure, it's expensive for the merchant, and theft is ignored (when millions of stored creditcard records are stolen, those cards are not invalidated and replaced?). This is all at the cost of customers and other merchants.…

There are many reasons to use credit cards, and some of what you said is just not accurate: - The vast majority (probably 95%+) of cards have rewards built in. Everything from miles to redeem on travel and accommodations to the most common being cash back credited against your account. These can range anywhere from 1% to 5% outside of special promotions where you typically get even more. - They offer increased consum…

Those benefits don't come without a cost though, and not just from cardholders who do carry a balance and pay interest. The merchant fees, chargebacks and other costs get tacked on to their COG.

Re: Candy Japan hit with credit card fraud

#184

Post by Maarten88 »

pc86 wrote: post #154
Maarten88 wrote: post #83

Earlier quoted context omitted.

Living in Holland, where everyone does online transactions with iDeal, I find it hard to understand why the rest of the world is using credit card payments at all, for anything. It is massively insecure, it's expensive for the merchant, and theft is ignored (when millions of stored creditcard records are stolen, those cards are not invalidated and replaced?). This is all at the cost of customers and other merchants.…

There are many reasons to use credit cards, and some of what you said is just not accurate: - The vast majority (probably 95%+) of cards have rewards built in. Everything from miles to redeem on travel and accommodations to the most common being cash back credited against your account. These can range anywhere from 1% to 5% outside of special promotions where you typically get even more. - They offer increased consum…

> None of this is at direct cost to the customer

Then who do you think is paying for those rewards/cashbacks? Who is paying for the extra warranty? Who is paying for the costs of the chargebacks and the replacement of cards that get stolen by the millions?

The answer could be you, creditcard users who dont pay off in time, or people who use other payment methods. It certainly isn't the banks or the merchant who's paying all this.

Re: Candy Japan hit with credit card fraud

#185

Post by germanier »

scurvy wrote: post #150
germanier wrote: post #138

Earlier quoted context omitted.

After I make my two clicks for which you have several months time (only needed to do that once) the actual transaction is reversed immediatly. That means even if I notice it three weeks later, the bank pretends the direct debit never happened and is not included in any interest calculation etc.

Well, that was my experience with American Express. I noticed a fraudulent charge, called them up and was done 5 minutes later. Everything was refunded immediately after I hung up. That was the end of it. OTOH, my Chase experience was not nearly as smooth.

That's the whole point of the thread: If you cater to a global audience you can't assume that what works for you will work for someone on the other side of the planet. Different markets tend to favor different solutions in customer adoption, law, and regulation.

Re: Candy Japan hit with credit card fraud

#186

Post by pravda »

Maarten88 wrote: post #184
pc86 wrote: post #154

Earlier quoted context omitted.

There are many reasons to use credit cards, and some of what you said is just not accurate: - The vast majority (probably 95%+) of cards have rewards built in. Everything from miles to redeem on travel and accommodations to the most common being cash back credited against your account. These can range anywhere from 1% to 5% outside of special promotions where you typically get even more. - They offer increased consum…

> None of this is at direct cost to the customer Then who do you think is paying for those rewards/cashbacks? Who is paying for the extra warranty? Who is paying for the costs of the chargebacks and the replacement of cards that get stolen by the millions? The answer could be you, creditcard users who dont pay off in time, or people who use other payment methods. It certainly isn't the banks or the merchant who's pay…

It is the merchants. Credit card fees are paid by merchants. It comes out of profits.

Re: Candy Japan hit with credit card fraud

#187

Post by ars »

scurvy wrote: post #153

The one-time card numbers generated by the old AMEX Blue system were great for shopping on sites you didn't trust. Too bad that they dumped that and the card reader system around 2002-2003? I really liked it and felt much more confident using it. Seems like it would have cut down on fraud a lot more than many systems in use. That said, I really don't know why anyone would want to try and write their own payment integ…

They still exist, Bank of America has it.

https://en.wikipedia.org/wiki/Controlled_payment_number

Re: Candy Japan hit with credit card fraud

#188

Post by astrange »

emodendroket wrote: post #129
rplnt wrote: post #93

Earlier quoted context omitted.

Having visited NL, my card was practically useless. Any other country no problem, but Netherlands? So I don't understand you really. That being said, direct payment gateways are common, but they require cooperation with banks. There's probably hundreds of them and only make sense on local market where you can have on or two implemented to satisfy 80%+ of customers (and others will just use regular card).

Try Japan. Credit cards won't be accepted half the places you go and only a small percentage of ATMs will allow you to withdraw money from a foreign account at all.

Credit should be accepted in stores where you're expected to spend over 10,000JPY/$100, but anywhere small is cash-only. In Tokyo you might be able to NFC pay from your transit card balance, and the taxis take cards.

As for ATMs, go find a 7/11 or a Post Office and those will work.

Re: Candy Japan hit with credit card fraud

#189

Post by ubersync »

imaginenore wrote: post #101

That's why the whole credit card system is insane. 1) It's a pull instead of a push. Anybody with your CC details can attempt to charge it. Bitcoin model is much more sane. 2) There's not even a "approve the charge" option. 3) The cartels controlling the credit card systems charge insane amounts of money for transactions, attempted or real. I really want Bitcoin or some other alternative to succeed.

Exactly. I hope we will see a world soon, where Bitcoin (or another cryptocurrency) is as ubiquitous as credit cards now.

Transaction fees for a failed credit card payment? Its more than insane.

Re: Candy Japan hit with credit card fraud

#190

Post by ubersync »

Unjustified credit card fees and the financial/psychological burden of chargebacks (resulting from uncontrollable credit card fraud) are the main reasons why I want the Bitcoin experiment to succeed. Lets give Bitcoin some love where it deserves.
Post reply on HN