I hope stripe open source some of their UI related stuff.
Radar – A new set of integrated tools to help prevent fraud
41–50 of 120 posts
Re: Radar – A new set of integrated tools to help prevent fraud
#42I work at a company with a fairly large number of transactions and we don't really have a problem with fraud. I don't know anyone else who's really battled it either. Is it much more prevalent for certain industries and products?
Yes unfortunately. We run a property rental advertising service and are always battling fraud. We have had to implement tons of security features to try and catch things before they come through.
Fraud is not an issue at all for our business SaaS products.
Re: Radar – A new set of integrated tools to help prevent fraud
#43Is there support for whitelisting transactions? E.g. if we are executing a charge for a known-good customer, but using acompletely new card - we'd like to suppress all automated fraud checks and, ideally, indicate to the client's bank that this is a legit charge.
Yes.
We try to be smart about things. For example, if you use Subscriptions, we assume that subsequent charges of a happily paying customer are also very likely to be good and so we do not block them.
Most users won't need to tweak the default behavior, but it is flexible in both directions. You can use the same rule builder interface to whitelist a transaction vis-a-vis Stripe, using boolean logic on a variety of things Stripe knows about the charge. Whether this will work for what you want to do depends a bit on the specifics of it -- we'd be happy to advise.
A subtlety: Due to the way credit card payments work, customers' banks already assume that every business running a charge is representing to them "It is our good faith belief that this payment is legitimate" and so they don't expose a way to say "No, really, we're EXTRA SPECIAL sure about this one. Please give us their money." If they come to the conclusion that a payment is likely to not be authorized, they will take action to protect their customer.
(Disclaimer: I work at Stripe.)
Re: Radar – A new set of integrated tools to help prevent fraud
#44Earlier quoted context omitted.
Of course. I sell business software, never had a fraudulent transaction ever. But the video game and porn industries, for example? Tons of fraud.
You can prevent a lot of fraud by simply requiring both a postal code and the CVV on the card. It's unlikely that a card thief has both pieces of data. (If you steal the physical card, you won't have the postal code, if you buy a database of cards, unlikely that they will have CVV's)
I wish this were true. We have both AVS and CVV checks on payments and things still made it through a property rental advertising service we run. It was an uphill battle until we implemented https://www.maxmind.com/en/minfraud-services
Re: Radar – A new set of integrated tools to help prevent fraud
#45Just checked our Stripe dashboard and it looks like this has quietly been doing good work for us for many months now blocking suspicious charges. It took me a few clicks to find https://dashboard.stripe.com/search/rules?rule_token=block_i... and after going through a few of them, the per-charge risk factor descriptions are really helpful too. The high-risk reasons are messages like: "This card has been used from an u…
I have a similar transaction blocked as well. Very cool to see this has been in action for awhile.
Re: Radar – A new set of integrated tools to help prevent fraud
#46Earlier quoted context omitted.
Of course. I sell business software, never had a fraudulent transaction ever. But the video game and porn industries, for example? Tons of fraud.
You can prevent a lot of fraud by simply requiring both a postal code and the CVV on the card. It's unlikely that a card thief has both pieces of data. (If you steal the physical card, you won't have the postal code, if you buy a database of cards, unlikely that they will have CVV's)
But not all countries use postal codes, and checking of card registered address details is always a bit fuzzy simply because there may be several correct but different ways a legitimate cardholder might enter them.
Re: Radar – A new set of integrated tools to help prevent fraud
#47This looks very promising. Stripe seems to have sometimes let surprising payments through up to now, even with all the card details security checks they provided activated, and they've never supported 3-D Secure. They've also suffered from surprisingly high rates of unexpected declined charges in our experience. Hopefully if they're now rolling out more comprehensive fraud protection, that will go some way to address…
> they've never supported 3-D Secure That's a feature. It's a horrible system which I wish nobody ever used. I've literally never been able to successfully complete a transaction.
It's not great in many respects, but it has the compelling advantage of shifting fraud liability from the merchant to someone else. Depending on your market, it may be worth the loss in conversions from activating it.
Even if you're in a normally low-fraud market, as every business I work with that takes card payments is, almost anyone taking small value card payments on-line is vulnerable to being used as a card testing engine if their system can be automated. If nothing else, being able to toggle the extra check on temporarily if you become aware that your system is being abused that way is an extra level of security you can apply in a hurry.
Re: Radar – A new set of integrated tools to help prevent fraud
#48Earlier quoted context omitted.
Of course. I sell business software, never had a fraudulent transaction ever. But the video game and porn industries, for example? Tons of fraud.
You can prevent a lot of fraud by simply requiring both a postal code and the CVV on the card. It's unlikely that a card thief has both pieces of data. (If you steal the physical card, you won't have the postal code, if you buy a database of cards, unlikely that they will have CVV's)
This isn't even remotely true. There's tens of thousands listed for sale for < 10 USD all over the web right now.
Re: Radar – A new set of integrated tools to help prevent fraud
#49I work at a company with a fairly large number of transactions and we don't really have a problem with fraud. I don't know anyone else who's really battled it either. Is it much more prevalent for certain industries and products?
There are many kinds of fraud with different patterns. Some have a lot to do with what you sell, but others can affect anyone that takes credit cards.
For instance, fraudsters that have received a bunch of stolen credit card numbers will want to test which cards are still good. They'll do that by making a small purchase at an online retailer, and if the charge clears, then use the card to get something illegitimately. While you might not be a good target for that second step, anyone that takes credit cards and has weak fraud protection steps will be a target.
What one day looks like an unexpected spike in sales becomes a huge spike in chargebacks later, as all of those sales were fraudulent. I am pretty sure there's been stories in Hacker News about this.
Re: Radar – A new set of integrated tools to help prevent fraud
#50Stripe is really the next Google with their innovative technology. They really are solving hard Computer Science problems.