Live data from Hacker News

Ask HN: How does onlyfans.com work around the “no porn” Stripe rule?

news.ycombinator.com

111–120 of 305 posts

Re: Ask HN: How does onlyfans.com work around the “no porn” Stripe rule?

#111
post #95
post #85

Earlier quoted context omitted.

Maybe the confounding factor here is that the term "load balance" could be extremely unsuitable for onlyfans' processing logic; e.g. they might preferentially route the risky transactions to one or two processors that won't get too agitated/punitive.

How is any given transaction distinguished as being risky or non-risky?

If you've had multiple transactions with the same buyer with no chargebacks, you can probably put that buyer in a low risk pool.

Re: Ask HN: How does onlyfans.com work around the “no porn” Stripe rule?

#112

Earlier quoted context omitted.

Interesting. Do they literally embed Stripe JS? I'm not a front end developer and don't know a ton about web security, but it seems like a malicious/hacked site could still get the card number this way. The purpose of PCI compliance is to protect the number/info, so how would Stripe (and similar) get approved if they're creating a payment widget that allows third parties to snoop card numbers? Is this a PCI loophole,…

Stripe JS uses an iframe for card number which blocks the site from accessing the number. And the only way to access the card number is either a security hole in the iframe message handling or in the browser.

Thanks, that makes sense. It's , not . (They're embedding more than JS.)

Re: Ask HN: How does onlyfans.com work around the “no porn” Stripe rule?

#113

Earlier quoted context omitted.

Interesting. Do they literally embed Stripe JS? I'm not a front end developer and don't know a ton about web security, but it seems like a malicious/hacked site could still get the card number this way. The purpose of PCI compliance is to protect the number/info, so how would Stripe (and similar) get approved if they're creating a payment widget that allows third parties to snoop card numbers? Is this a PCI loophole,…

Stripe JS uses an iframe for card number which blocks the site from accessing the number. And the only way to access the card number is either a security hole in the iframe message handling or in the browser.

Not really. It's true that the main site (parent of the iframe) wouldn't normally have access to the card numbers, but there's nothing preventing you from replacing the iframe entirely. There isn't an "address bar" for iframes, and people certainty aren't manually checking the address by right-clicking, so there's a very high chance you can get away with it. Even if some user checked and noticed the iframe was missing, there are enough sites that don't use iframes for payment processing (ie. they submit credit card numbers directly to their servers) that it wouldn't look out of place.

Re: Ask HN: How does onlyfans.com work around the “no porn” Stripe rule?

#114

Cascading payments might be the real answer, and shuffling higher risk charges to non-Stripe providers, but in my experience, Stripe can get pretty moralizing pretty quickly. We built an adult ecommerce site (purely toys for purchase, no porn) and because other adult toy sites had been successful on Stripe, Stripe assured us this wouldn't be a problem. Six months and several million dollars processed later, Stripe in…

>where Stripe suggested we alter the colors available What? Like flesh colored was ok but definitely not green ones or something?

I'd guess the opposite, from the story.

Re: Ask HN: How does onlyfans.com work around the “no porn” Stripe rule?

#115

Cascading payments might be the real answer, and shuffling higher risk charges to non-Stripe providers, but in my experience, Stripe can get pretty moralizing pretty quickly. We built an adult ecommerce site (purely toys for purchase, no porn) and because other adult toy sites had been successful on Stripe, Stripe assured us this wouldn't be a problem. Six months and several million dollars processed later, Stripe in…

>where Stripe suggested we alter the colors available What? Like flesh colored was ok but definitely not green ones or something?

The inverse of this. Here's their exact, hilarious wording:

>Our banking partners recently notified us that they are no longer willing to support the sales of realistic sex toys. I understand that your products were designed to depict the body parts of mythological and fantastical creatures, and we have indicated this to our banking partners in an effort to advocate for continuing to support your business here on Stripe. As a result of these discussions, our banking partners have agreed that they are willing to continue supporting your business as long as you are not selling products that are colored such that they might be mistaken for human flesh.

Re: Ask HN: How does onlyfans.com work around the “no porn” Stripe rule?

#116
post #90

Earlier quoted context omitted.

The porn industry has been known in the past to have some very shady people working within it. They would use the porn as a front for other illicit activity. The have used porn to launder money from those other activities. Credit card fraud is a huge part of that. If you are into stolen credit cards while owning a porn site, you just subscribe to expensive recurring plans. It's not really hard to understand why it's…

Why didn't they use non-porn for such activities and money launder? What is the substantial difference between porn and any other expensive subscription? E.g. you build a garage, name it notaws (or whatever service was expensive back then) and launder an ocean of fraud through it. Why must somebody get banged in the process?

You're assuming this is an either/or situation. Criminals spread their money all over the place. Porn just has so much money going through it that it makes it very tempting and lucrative.

Re: Ask HN: How does onlyfans.com work around the “no porn” Stripe rule?

#117

Earlier quoted context omitted.

> How do you find out what payment processor(s) a given site uses? I'm a developer so looking at what kind of request the application is doing when interacting with anything involving payments. In the case of OnlyFans it was easy as they make direct requests to Stripe. In other cases, I've looked at the data structures stored in the current page by using the JS console and compare it to the API docs of various paymen…

I'm not a web developer but I always assumed that happened on the backend, so it wouldn't be visible. I guess not?

Very often it is an IFrame with embedded content from the payment processor.

Re: Ask HN: How does onlyfans.com work around the “no porn” Stripe rule?

#118

Earlier quoted context omitted.

>where Stripe suggested we alter the colors available What? Like flesh colored was ok but definitely not green ones or something?

The inverse of this. Here's their exact, hilarious wording: >Our banking partners recently notified us that they are no longer willing to support the sales of realistic sex toys. I understand that your products were designed to depict the body parts of mythological and fantastical creatures, and we have indicated this to our banking partners in an effort to advocate for continuing to support your business here on Str…

You should tell them to judge mythological sex toys not by the color of their skin, but by the context of their character.

Re: Ask HN: How does onlyfans.com work around the “no porn” Stripe rule?

#119

Earlier quoted context omitted.

>where Stripe suggested we alter the colors available What? Like flesh colored was ok but definitely not green ones or something?

The inverse of this. Here's their exact, hilarious wording: >Our banking partners recently notified us that they are no longer willing to support the sales of realistic sex toys. I understand that your products were designed to depict the body parts of mythological and fantastical creatures, and we have indicated this to our banking partners in an effort to advocate for continuing to support your business here on Str…

Wow, this is hysterical! A bank saying no to honest money because it’s sex toys, not even that, because it’s sex toys looking like human genitalia, — no not even that, because the toys are skin colored!

I wonder if this would ever happen in Europe. I somehow feel that we’re more... open to these things. Do you know about Klarna?

Re: Ask HN: How does onlyfans.com work around the “no porn” Stripe rule?

#120
post #83

Earlier quoted context omitted.

What I don't understand is that that this isn't even illegal, so how could the government possibly argue that those accounts should be closed?

Because the government insures those accounts for hundreds of thousands of dollars each. If you want to benefit from the insurance then you can only use the account for purposes allowed by the insurance contract which excludes "high risk" activities which is defined to include essentially all sex related services.

I thought the government insures those for when the bank burns down. How does my employment come into play here?
Post reply on HN