I use chargebee so much better and cheaper than recurly
How Candy Japan got credit card fraud somewhat under control
121–128 of 128 posts
Re: How Candy Japan got credit card fraud somewhat under control
#122If you suspect an order is fraud, don't go out and say to the criminal "hey, I declined your super suspicious order!". Instead, play dead. Pretend they got you. Tell them "thank you for your order", behaving exactly the same way as if it really was a successful order. The name of the game is to make things cost more for your enemies than they cost for you. Removing instant feedback is key. Instant feedback is great.…
Valve will sometimes delay banning CS:GO hackers to confuse them about just what triggered the ban.
Re: How Candy Japan got credit card fraud somewhat under control
#123I'm guessing this has been asked before, but why not just use a credit card processor that handles all of that stuff for you. Seems like they are in the business of selling Japanese candy, not preventing CC fraud. Am I being naive here?
Yes. At $DayJob we have a similar process [e.g. Accept any card that passes the checksum, hand out rejections on a 24 hour delay after we've handled our fraud signals and processed the charge with the gateway] The credit card processors aren't particularly interested in handling this for you and you [the merchant] pay the price if you gave the processor stolen card numbers. Services like these: https://www.signifyd.c…
Is it just me or is 1% likely several orders of magnitude larger than $0.005 on a per-transaction basis? That pricing is bordering on offensive.
Re: How Candy Japan got credit card fraud somewhat under control
#124Earlier quoted context omitted.
Do paywalls face as much fraud? My understanding is that industries that provide digital goods or services see a much lower rate of fraud because there's little resale value involved (and the cost of stolen/returned goods is much lower).
He's not concerned about fraud where he is out goods, he's concerned about fraud where he's being used as a card verification tool. Checking the validity of credit cards is expensive and hard for carders; They need to do so fast and in bulk, but without setting off the fraud detection on the other side and killing the card.
Ah ok, that makes sense. A paywall would be perfect for that.
Re: How Candy Japan got credit card fraud somewhat under control
#125Earlier quoted context omitted.
Replace "Russian state" with "African American culture", and I think the problem with this attitude becomes more obvious.
Please point me to the representative "african american culture" government apparatus and you'll have a point.
Part of the role of a government apparatus is to enforce social norms. Culture plays a similar role. They aren't the same thing, but they do have similar attributes.
Please note that I am not criticizing any governments or culture; I merely wonder why we're OK with nationalism like this, but not racism.
Re: How Candy Japan got credit card fraud somewhat under control
#126If you suspect an order is fraud, don't go out and say to the criminal "hey, I declined your super suspicious order!". Instead, play dead. Pretend they got you. Tell them "thank you for your order", behaving exactly the same way as if it really was a successful order. The name of the game is to make things cost more for your enemies than they cost for you. Removing instant feedback is key. Instant feedback is great.…
What happens if you have a very small false positive rate for fraud, and end up stiffing the customer? You could easily land in deep trouble with consumer protection laws after falsely satisfying their order.
Re: How Candy Japan got credit card fraud somewhat under control
#127Earlier quoted context omitted.
Please point me to the representative "african american culture" government apparatus and you'll have a point.
Part of the role of a government apparatus is to enforce social norms. Culture plays a similar role. They aren't the same thing, but they do have similar attributes. Please note that I am not criticizing any governments or culture; I merely wonder why we're OK with nationalism like this, but not racism.
> I merely wonder why we're OK with nationalism like this, but not racism.
I'm not appealing to nationalism? "Russia" could be a stand-in for any controlled territory.
For example many businesses that trade online in the US attempt to exclude people from the Eastern District of Texas in their terms and conditions. Why? Because the courts there are very friendly to plaintiffs in patent cases and they'd prefer not to get sued in that jurisdiction.
That district is causing a negative externality to people outside of it, so they refuse to do business with it.
Re: How Candy Japan got credit card fraud somewhat under control
#128When I worked on an e-commerce website shipping physical goods we would only ship to the customer's billing address for credit card payments. Anyone shipping to a different address needed to call their credit card company to add the address (every credit card company I've dealt with would allow customers to have multiple valid addresses on file), or use a different payment method. We never had big issues with fraud a…
You do know that some cards allow any billing address right?
If it's a source of fraud we never ran into it.