Live data from Hacker News

PayPal is currently blocking all transactions containing the word “tardigrade”

twitter.com

111–120 of 216 posts

Re: PayPal is currently blocking all transactions containing the word “tardigrade”

#111

Earlier quoted context omitted.

I don’t know if PayPal ever claimed otherwise, but I’ve suspected that much of the AI powered moderation online is simply advanced keyword matching. We have to start accepting that either websites are unwilling to or unable to do moderation in any meaningful way, unless they hire human moderators at huge costs. Hearing an interview with the country for Facebook on Danish radio just two weeks ago, it’s pretty clear to…

Politicians often ask for silly things in connection with technologies they don't really understand, to achieve goals they don't really expect to achieve, just in order to look good to a certain part of the electorate. Consider an analogy between modern social media sites and something like a phone network or postal mail service. What would happen if a politician suggested that phone companies or their national posta…

That's a terrible analogy, for two reasons.

1. Post and phone have an expectation of privacy so the government can't review them (in the US, at least)

2. There is already a system in place to review all phone calls in real time. It's run by several Western intelligence agencies to get around the monitoring rules mentioned in #1.

Re: PayPal is currently blocking all transactions containing the word “tardigrade”

#112

Same for the word "Bitcoin". If you try to send something with this word to somebody it will block their and your account. For me this is an (kamikaze) attack vector.

I mean, why stop at just "Bitcoin". Might as well put a bunch of the words in there to increase your chances (eg. iran, nuclear, uranium enrichment, north korea, isis etc.), kind of like https://www.google.com/search?client=firefox-b-1-e&q=tiananm...

Re: PayPal is currently blocking all transactions containing the word “tardigrade”

#113
post #42

Earlier quoted context omitted.

Well completing Know Your Customer checks and audits is sort of their job, isn’t it? They provide a service, saying that they will process payments unless the payment is prohibited by government sanctions. But instead of carrying out actual due diligence, they just block anything remotely related and put the onus and cost of doing their own job on their customers. At least they should have a better process to start p…

>saying that they will process payments unless the payment is prohibited by government sanctions if they say that they will process payments unless prohibited by government sanctions and then do not process payments that is not prohibited I guess they would be getting sued for those payments.

evidently not given the downvotes, but then I don't understand, if their terms of service say we pay out unless the payment would be of type X and then they keep from paying out on payments of type Y they have violated their terms of service and thus would be open to being sued.

Re: PayPal is currently blocking all transactions containing the word “tardigrade”

#114
post #91

Earlier quoted context omitted.

You're right but I think you'd perhaps be surprised how international sanctions monitoring works. Example, I know one of the largest banks in Europe used to have payments they sent to one of their South American branch offices blocked from time to time because their address in Brazil or Argentina or something was on a street called "Avenue de Cuba".

But PayPal specifically isn't under banking laws which is how they cover their ass normally (like if you have money at PayPal and they terminate your account you never get your money , which there are thousands and thousands of cases of PayPal doing which would be illegal for an actuall bank), so banking law has nothing to do with PayPal.

In the US, the PATRIOT act, and thus KYC laws, apply to money service businesses. This includes PayPal.

Re: PayPal is currently blocking all transactions containing the word “tardigrade”

#115
post #104

Earlier quoted context omitted.

Our six month old was on the list. It was a shock when we went to the airport, and they asked that he be taken aside for an interview with a TSA agent. We wrote a letter explaining the situation, and got a letter back acknowledging that our information had been received. They stopped asking 3-4 years later.

That they even requested that a 6 month old be taken aside is absolutely insane

Not only that insanity, but... you need a thing called "ID" these days. ID to fly.

If you can fake ID, and you're on some list, why on Earth would you use the same name? And if you can't fake ID, then it will be linked to, you know, ID numbers, birthdays, and more.

I can't even imagine how "just names" ended up on that list, as a match requirement. How many John Smiths are there?

Very, very strange. I don't get it.

Re: PayPal is currently blocking all transactions containing the word “tardigrade”

#116
post #7

Per [0], a possible answer to this seems to be that an arms dealer had connections to a company called Tardigrade Ltd. and all transactions with firms like these are prohibited which is why the word "Tardigrade" made it into PayPal's filter. As long as companies like PayPal have issues like that, or with moderation in case of Youtube, Twitter or Facebook, I'd claim neither of these companies have actually solved scal…

PayPal compliance is a very different problem to social media moderation. Financial regulations require any transaction that is "suspicious" in any way of having links to terrorism financing or money laundering be reviewed, and there are large and personal penalties for not doing so. And a review is expected to be more like auditing your customers entire financial history than just asking what they meant by a word, s…

> And a review is expected to be more like auditing your customers entire financial history than just asking what they meant by a word

In the US, which is presumably where the sanctions trigger originates (the company is on OFAC's list), a review of a transaction is just that. Even opening an account doesn't require a review of your customer's entire financial history, merely that, for a business account, you understand the nature of your customer's business.

> In that climate there's no good reason not to massively over-filter, the risks of a false negative are way too high.

There is, however, good reason to do an actual review and not outright block transactions. The advice PayPal gave its customer, "change the wording on your website to prevent this from happening," is exactly what competant regulatory training tells you not to do. Changing the wording of a transaction to obviate the need for a review is in itself a red flag. PayPal is utterly incompentant.

Re: PayPal is currently blocking all transactions containing the word “tardigrade”

#117
post #106

Earlier quoted context omitted.

I suspect there's a false positive rate on some teams's dashboard and it's kept at an acceptable level that won't require raising transaction fees or incurring too many more OFAC fines.

How would they know what transactions were true positives vs false positives? That would require them to know whether a transaction is bad or not, which as we know, is a hard problem

Random sampling, Monte Carlo methods, statistical inference, etc

Re: PayPal is currently blocking all transactions containing the word “tardigrade”

#118

Earlier quoted context omitted.

> seemingly renders compliance managers unable to tell the difference between categorically different things Because it renders them liable. The whole system will turn against you if you give it an opportunity to nail you for using discretion. And this happens everywhere in society after a certain size is reached due to the need to hold people accountable without actually being able to fully evaluate who or what is t…

Only if there was some sort of cohort of people who would be able to judge actions to see if they are liable. Perhaps we aren't scaling the judiciary system propley & allowed it to become overly complex so that only a certain subsect of the population can navigate it efficiently and an even smaller portion of that can litigate for others.

Perhaps. Maybe if the same cohort of people who practice said laws weren’t incentivized to challenge existing laws and to make more laws there would be more resources to help judge.

Re: PayPal is currently blocking all transactions containing the word “tardigrade”

#119
post #59

Earlier quoted context omitted.

Yes they would, the fines are up to 250,000 per incident. If you share a name with someone on the AML list, good luck opening up a financial account anywhere and if you do manage to get an account, being able to fund the account from another source.

You're not comparing like with like there. If you share a name with a suspicious group, yes, that's a hard problem to solve. That's not this. This is a _product_ with the same name as a suspicious group. It's categorically irrelevant.

No, aggressive filtering is the rational move here. The risks are highly asymmetric. A false positive gets you a frustrated customer that, as in this case, you can work with to modify the product description. Annoying.

A false negative can get you a fi ne of $250,000 and criminal penalties.

This isn't an issue of ( or not just an issue of) "not solving scale". Even if filtering issues if this sort were 99.9999% solved the risk asymmetry would still come down on taking an abundance of caution on nation-state levels of "oh crap" if you miss something.

Re: PayPal is currently blocking all transactions containing the word “tardigrade”

#120

I had a horrible experience with PayPal earlier this year. I needed to send $500 to an individual buying our house, they were paying cash and on such a tight timeline for closing that the closing docs were written up before they got back their inspection report and asked for an allowance. Paypal kept blocking the transaction even though it was just a simple person to person transfer. I was on chat with their support…

NO security team?!

So they literally admitted that they don't have anyone actively monitoring transactions? Working to watch for fraud? Theft? Hacking?

Wow, I may stop using them as well.

Post reply on HN