Live data from Hacker News

Stripe Is the New PayPal

news.ycombinator.com

61–70 of 329 posts

Re: Stripe Is the New PayPal

#61

-- PSA regarding Credit Card Validation -- Last year I was testing Stripe integration. I tried using my own credit card with a fake name. Surprise, it went through. I emailed Stripe support. After half a dozen emails discussing CC authorization I learned that Stripe does not and can not validate Name & Address on credit card. Stripe told me that Credit Card companies do not disclose this data to Payment Processors li…

Virtually all card issuers support AVS (Address Verification System) in US, UK and Canada. In other countries, it's less reliable. AVS checks only the numeric portion of the street address and postal code, and returns a code indicating whether AVS is supported and whether one or both of the numbers match the ones on file with the card issuer.

Stripe supports AVS the same as other processors. Whether you choose to reject cards that don't pass AVS is up to you: it's a setting. So is which of the codes you want to reject. That's the case at every payment processor I've used. Different businesses, collecting cards in different scenarios, are going to have different risk profiles and different needs. If you're running a store selling computers to strangers over the internet, you probably want full AVS in addition to other fraud checks. If you're taking an invoice payment from another business you've worked with for years, you might not want to bother collecting and verifying an address.

Re: Stripe Is the New PayPal

#62

-- PSA regarding Credit Card Validation -- Last year I was testing Stripe integration. I tried using my own credit card with a fake name. Surprise, it went through. I emailed Stripe support. After half a dozen emails discussing CC authorization I learned that Stripe does not and can not validate Name & Address on credit card. Stripe told me that Credit Card companies do not disclose this data to Payment Processors li…

It's up to the merchant / intermediary party to specify how much validation they want. Yes, you can choose that only card number & expiry have to be correct, or you can go the whole 9 yards and want name & address to be correct.

This isn't a Stripe-specific case. Moneris, a card processor in Canada, has a bunch of fields that a merchant can check on/off if they want them to validate the details during payment.

But you're right - if the validation isn't happening, why bother collecting the data? At the very least it might hurt conversion rates.

Re: Stripe Is the New PayPal

#63
I'm just surprised the handle disappointeddev was still available.

Do you sell cheap virtual goods? They're sometimes used to test stolen cards I heard.

Re: Stripe Is the New PayPal

#64
The one thing that surprises me most is why banks don't provide an payment processing API for their customers. I consult at a top bank in Canada ,and I brought this issue up several times in the online banking division and was met with complete indifference. The middle management ( all PMP certified) dont have the vision and the upper management is busy coasting along. My reasoning was that the bank is already doing a lot of business with the business customers and there is trustful relationship and quite a lot of these customers had some form of online presence ,so helping them with online payment processing would be cheaper for the bank ,given their working relationship. and these businesses would not consider taking their business to competition as that would entail switching costs. Also, fraudulent transaction would be less given the relationship history. But what do I know ? I am just an engineer .

Re: Stripe Is the New PayPal

#65
..Or the new Google..or the new Amazon.

Both of the above companies have nearly 100% automated responses. With Amazon, if you get your selling account put on hold for any reason (even if it's by mistake through their automated bots), you will not be able to talk to anyone on the phone or through email. Your account is also put on hold for 90 days and your money might get transferred back to you when they feel like it.

It happened to me a few years back. A customer was ordering merchandise, stealing it, and filing disputes with Amazon. I wasn't able to block the customer, because it's not possible with their current system. Support was unhelpful (automated copy/paste responses) and they pretty much sided with the customer every time and deemed my account a "threat". Before this, 100% feedback.

It's a good lesson to learn: Don't base your business on one companym because they might just pull it out from under you one day.

Re: Stripe Is the New PayPal

#66
If every time a company popular on HN did something that one HN user found inexplicable we had a top-of-the-front-page story about it, the front page would be nothing but complaints. An "Ask HN" would make more sense, since that would (a) generate information instead of just broadcasting a complaint, and (b) reveal whether there was a trend behind it.

I flagged this story, and hope other people will too.

Re: Stripe Is the New PayPal

#67
post #17

> So how could it be true that the payments are unauthorised? Stolen cards, for instance, which may be more likely to happen in some industries than others. While I understand the need for ambiguity with respect to your business operations, this post is too vague to give any understanding as to why Stripe blocked your account.

The post talks about unauthorised charges. There is no way to validate the card prior to Stripe capturing payment, so they certainly are not upset about people using stolen cards on your own site, as you have no way of mitigating that. The migration to Stripe that I handled a year or so ago had 5 or 6 stolen cards/people iterating card lists looking for working cards per day and never had a complaint from Stripe. Onc…

> as you have no way of mitigating that.

Actually, you do. In many cases, fraud follows a pattern. If you're a merchant, and you're getting a lot of fraudulent charges, you'll often get into a discussion with your upstream processor's fraud department about the details and how to mitigate it. I don't work in payments anymore, but as an example of how this works, I was talking a few weeks ago with a merchant who does tens of millions gross every year, but also faces five digits of fraudulent transactions. They sell car parts, so it's quite easy to buy one or two things for a lot of money. While working with their processor, they discovered that a significant amount of fraud was coming from two cities. And not just two cities, but two neighborhoods. And not just two neighborhoods, but two streets.

They simply reject any transaction from that street before even sending things to the processor, and now they're saving tens of thousands of dollars a year.

Re: Stripe Is the New PayPal

#68

-- PSA regarding Credit Card Validation -- Last year I was testing Stripe integration. I tried using my own credit card with a fake name. Surprise, it went through. I emailed Stripe support. After half a dozen emails discussing CC authorization I learned that Stripe does not and can not validate Name & Address on credit card. Stripe told me that Credit Card companies do not disclose this data to Payment Processors li…

When I used to process credit cards for MetLife it would always error out if I messed up the name or address. This was only about a year ago. I forgot what system we were using, but just thought I would mention it.

Re: Stripe Is the New PayPal

#70
post #66

If every time a company popular on HN did something that one HN user found inexplicable we had a top-of-the-front-page story about it, the front page would be nothing but complaints. An "Ask HN" would make more sense, since that would (a) generate information instead of just broadcasting a complaint, and (b) reveal whether there was a trend behind it. I flagged this story, and hope other people will too.

With all due respect, take a quick look through the replies, there are a lot of "I experienced this too" comments. If you go further and search HN you'll see that this tends to be a common problem with Stripe support.

I think that this type of post is fine for HN. It's a YCombinator backed company, with the founders and most of the team commonly browsing the site and people here are usually able to point you in the right direction.

Post reply on HN