Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Stripe is friendly to “friendly fraud”

gingerlime.com

Post reply on HN
Print view View original

131–140 of 258 posts

Re: Stripe is friendly to “friendly fraud”

#131

Post by bellowsgulch »

hosteur wrote: post #125
zuzululu wrote: post #28

My suggestion is to just ban specific regions or countries and you can cut 80% of this fraud. I'm not going to name those countries outright but you should never ever be launching globally until you have these safeguards in place. Once you are known to be vulnerable to a certain scheme, it quickly becomes known in that region/country. Again and again I'm reminded why high trust societies remain high trust and why low…

Why do you not want to name them?

It makes the conversation turn into an electromagnet for racists.

You can’t ignore the stereotypes, but you can let people figure it out themselves. You don’t have to say it when it’s already obvious.

Re: Stripe is friendly to “friendly fraud”

#133

Post by rtgfhyuj »

bellowsgulch wrote: post #131
hosteur wrote: post #125

Earlier quoted context omitted.

Why do you not want to name them?

It makes the conversation turn into an electromagnet for racists. You can’t ignore the stereotypes, but you can let people figure it out themselves. You don’t have to say it when it’s already obvious.

[dead]

Re: Stripe is friendly to “friendly fraud”

#134

Post by dghlsakjg »

fencepost wrote: post #124

I assume that this is basically just not worth pursuing for small-scale orders (e.g. $15ish for Ciglue), but for larger ones what are the reasonable approaches for scenarios that don't involve stolen card fraud? Notably disputing a credit card charge is completely independent of whether someone owes the debt, the credit card is simply a convenient way for that payment to be handled. What's the point where other colle…

Correct, the debt is still valid.

You can try to collect through persistence, or take them to court, get a judgment, and then a court ordered collection. It all depends on the value of your time.

I’ve heard rumors that some merchant agreements with processors may include arbitration clauses for recovering chargebacks, but I’ve never seen it personally.

Re: Stripe is friendly to “friendly fraud”

#135

Post by cherioo »

cortesoft wrote: post #113
m463 wrote: post #106

Earlier quoted context omitted.

I had a friend with the apple card, and there were fraudulent charges on her card before she even used it. I think that caused her to over-scrutinize things. But (years) later I saw her using apple pay. She had charges she didn't recognize and would immediately flag them. Thing is, I couldn't help but think they might have been real charges with weirdly named companies on the transaction.

I feel like companies should do a better job of naming their payment entity something that a customer can know when they see it.

It’s 2026, why can’t credit card and merchant figure out a way to transmit order summary URL as part of credit card transactions so I don’t need to match up transactions by amount??

Re: Stripe is friendly to “friendly fraud”

#136

Post by startages »

I help a lot of client with their ecommerce websites (mostly WooCommerce), attacks became so common recently, could be AI, but I found the best way to deal with this is to trace the patterns in access log and block the same patterns of checkout submission, this have worked really well for me. There are a lot of card testing attacks that Stripe doesn't care to handle as well as a lot of other fraud techniques, but there is always a pattern, especially automated ones. There is country, IP range, certain behavior (eg; no js, or direct api calls..etc). I really think it's easy to deal with this if you're willing to look deeper than a dashboard.

Re: Stripe is friendly to “friendly fraud”

#137

Post by imp0cat »

Cider9986 wrote: post #37
shash7 wrote: post #10

I run a saas and we get this every now and then. As a rule of thumb, when you get a chargeback you need to completely ban the customer from your db. This includes: - card ban - email address ban - fingerprint their access and ban This will save you a lot of hassle when they try to signup/buy your product again and cause you the same amount of grief.

All 3 of those identifiers can be easily changed by advanced users. I'm curious what you mean by fingerprint their access. Is this like an on demand fingerprinting, I've only seen browser fingerprinting as a tracker for every user.

Nice try, chargebacker! ;)

Re: Stripe is friendly to “friendly fraud”

#138

Post by Cider9986 »

imp0cat wrote: post #137
Cider9986 wrote: post #37

Earlier quoted context omitted.

All 3 of those identifiers can be easily changed by advanced users. I'm curious what you mean by fingerprint their access. Is this like an on demand fingerprinting, I've only seen browser fingerprinting as a tracker for every user.

Nice try, chargebacker! ;)

I try to pay with Monero, so I can't chargeback :)

Re: Stripe is friendly to “friendly fraud”

#139

Post by tsimionescu »

Cider9986 wrote: post #127
zuzululu wrote: post #88

Earlier quoted context omitted.

I dont follow. If regular finance to a country is that much distanced from global financial oversight and treaties where crypto (with awful spreads) becomes the norm that doesnt necessarily mean they are victims of international financial order but that regular financially modeling simply cannot manage their unique risk characteristics

Damn, I made a great reply and it never sent–that sucks. I was more nuanced and specific, but I don't want to do it all again. 1. The fees are not awful idk what you mean, I pay between 0.1% and 1% fees on Monero transactions. 2. If the modelling can't manage their risk characteristics, they are by definition a victim of the financial system. I was more talking about people who have been debanked, though. I have a Ru…

This is actually one of the major reasons people should be very weary of accepting crypto, especially Monero. Instead of being able to basically outsource sanctions compliance to a bank, you take on the burden of trying to figure out if your customers are sanctioned yourself - with potentially dire consequences to your business if you get it wrong.

Re: Stripe is friendly to “friendly fraud”

#140

Post by t-3 »

cortesoft wrote: post #113
m463 wrote: post #106

Earlier quoted context omitted.

I had a friend with the apple card, and there were fraudulent charges on her card before she even used it. I think that caused her to over-scrutinize things. But (years) later I saw her using apple pay. She had charges she didn't recognize and would immediately flag them. Thing is, I couldn't help but think they might have been real charges with weirdly named companies on the transaction.

I feel like companies should do a better job of naming their payment entity something that a customer can know when they see it.

It's not really helpful if I recognize the name when the gas station doesn't put the charges on my card until Friday when I bought stuff there on Tuesday. Then I'm just confused and have to analyze my whole purchase history.
Post reply on HN