"Hey RELATIVE it's me here on Facebook I had to get a new account because I'm in trouble here in FOREIGN COUNTRY so please send me money. It's really easy and I need it bad! Just enter your credit card and I will be saved!" I know, I know, it's not the tool...but I am reminded of a certain scene from The Fifth Element... "I hate warriors, too narrow-minded. I'll tell you what I do like though: a killer, a dyed-in-the…
Kindel's Law: "Every new payment system rapidly transforms into an anti-fraud system."
I have seen far too many places -- whether they're side projects, smb, or even enterprises -- completely miss the antifraud step. There are companies like MaxMind who but for someone who is above average-intelligence and an apt "carder", it's so trivial to get around.
When I'm tasked by x company -- a bank, company, security team, or someone with a side project -- to run through their site and try to get an order shipped using false credentials, I can't even speak to how easy it is for me to do so with trivial effort. And it's not all fun to see.
There is a company who does gift cards, and they'd ship them out instantly. Once redeemed by the other merchant, bam, they're SOL.
Don't be this company. Don't be this entrepreneur. Don't be this hacker. Reach out to someone who knows what they're doing. If your business relies on conducting transactions, I don't care if it's flowers or dog leashes, or some shit that's going to end up on Shark Tank, you need to have anti-fraud in place.