101–110 of 208 posts
1) It's a pull instead of a push. Anybody with your CC details can attempt to charge it. Bitcoin model is much more sane.
2) There's not even a "approve the charge" option.
3) The cartels controlling the credit card systems charge insane amounts of money for transactions, attempted or real.
I really want Bitcoin or some other alternative to succeed.
Earlier quoted context omitted.
Having visited NL, my card was practically useless. Any other country no problem, but Netherlands? So I don't understand you really. That being said, direct payment gateways are common, but they require cooperation with banks. There's probably hundreds of them and only make sense on local market where you can have on or two implemented to satisfy 80%+ of customers (and others will just use regular card).
> my card was practically useless That's because merchants pay 3% or more for a creditcard payment, and something like 0.8% for a local bank card payment (with the online equivalent iDeal). On top of that, there is much more risk accepting the creditcard with chargebacks, while the banks guarantee normal/iDeal payments. So most merchants here really dislike creditcard payments, it "costs them" much more. Of course I…
The new regulations apply from 09 December 2015:
https://www.gov.uk/government/news/credit-and-debit-card-fee...
Earlier quoted context omitted.
iDEAL is fine for transactions between a Dutch client and a Dutch merchant. Other countries also have similar, local payment solutions which bypass credit card processors (e.g. POLi in Australia and New Zealand) But it does nothing for a business like Candy Japan which sells to a global audience. The advantage of credit cards is that they are one payment system that works pretty much everywhere, worldwide. Also, you…
> global audience That's the reason they recommended to use a payment gateway that implements all those local payment solutions. For example, in Germany you loose a lot of customers if you don't offer direct debit (ELV) as many don't own a credit card (and don't want to). > you typically don't have the same chargeback rights when using a banking service like iDEAL This heavily depends on the service. For example, the…
Suddenly one day, hundreds of donation attempts. Checking the failed transactions, the script was trying $1, then $2, etc up to $22 then starting over, each time with a different number. About $200 in successful donations came through before I caught it.
So I just shut it all down for now. I'm not really sure how best to fix it. The club has no money and already complain about the transaction fees they get charged per swipe (and those are all pretty standard rates in the U.S.). Being a non-profit, they expect a lot of stuff for free, and unfortunately won't consider paying for an anti-fraud service. Even PayPal takes too big a cut.
Realizing that this wasn't a helpful comment, just a "me too." It sucks. Oh well.
[0]: https://salembgc.org
Damn shame to hear about this Bemmu -- would've felt like a massive punch to your guts! Maybe you should set yourself up some email alerts when things seem 'off'. i.e. no referral, and the user/bot spends no time filling out the form and hitting submit. What's your glue code like? I'm rootin' for ya. :-)
This fraud would have been easy to detect if there had been any kind of detection system in place. But I had no fraud checking, captcha or 3-D secure, as I hadn't expected there to such a "fraud wave".
Those payments didn't feel like necessarily coming from a bot, as there were time delays and for many purchases they even filled in the questionnaire. It felt more like someone had a pile of numbers they were entering manually.
My form made that easy to do, as I had tried to eliminate any field which wasn't absolutely necessary.
We at Ravelin ( https://www.ravelin.com ) are building solutions to stop this. Still surprises me how many people think banks/schemes are responsible for CC fraud, when it's actually the merchant that gets punished. And yeah, fraudsters operate like locusts.
I also had something like this happen on a site I built for my wife's work's site, a Boys & Girls Club[0]. I had a donation button that let people make an open donation to the club. It's such a tiny site with little traffic, but apparently the SEO must be decent because somehow it got targeted by people appearing to come through Brazil and Poland. Suddenly one day, hundreds of donation attempts. Checking the failed t…
Earlier quoted context omitted.
Nobody seem to know or mention : https://en.wikipedia.org/wiki/3-D_Secure I have to use it with most online shops here in Switzerland.
3D Secure was mentioned in the other thread. Folks recommended avoiding 3D Secure / Verified By Visa because so many banks implement it insecurely, and the redirect model is easy for phishing scams to imitate: https://news.ycombinator.com/item?id=10235328 That redirect will kill conversion rates too, being redirected to a site you didn't expect claiming to be your bank but not matching its URL... of course it will fr…
Given how few sites actually implement it, it becomes a pain to use if you have to dig out the password or set it up on first use.
I commented this on yesterday's jsbin article, and I'll write it again. Don't implement the payment processing code yourself. (And using Stripe is _still_ implementing it yourself - they supply only one part of the process.) Writing this code will take time that you are not using to develop and market your product. (cf opportunity cost). Your code will be buggy. Your code will be weak. Your code will not support the…
Do you have an RSS feed or a link to where that post may show up? Thanks, highly interested!
Earlier quoted context omitted.
> global audience That's the reason they recommended to use a payment gateway that implements all those local payment solutions. For example, in Germany you loose a lot of customers if you don't offer direct debit (ELV) as many don't own a credit card (and don't want to). > you typically don't have the same chargeback rights when using a banking service like iDEAL This heavily depends on the service. For example, the…
Also I need recurring payments. Not sure if those would be possible with ELV / iDEAL.
Don't know about iDEAL, but I think that wouldn't work.
The thing: If you don't implement all of this yourself, you don't need to worry about the details. There are services that happily do this for you.