Live data from Hacker News

Tell HN: Automatic fraud detection is making my life hell

news.ycombinator.com

121–130 of 406 posts

Re: Tell HN: Automatic fraud detection is making my life hell

#121
post #73

Earlier quoted context omitted.

Nope. I travel to EU often with roaming on. OTP SMSs for many services don't come through. It's a real pain.

Very strange. How about regular SMS? Are they dropped too? I had zero issues with TMo, and I don't even need roaming for this.

It's weird, regular SMSs do come through, as far as I know. It's hard to tell as I don't get many SMSs, mostly iMessage and Whatsapp. I'm on AT&T, and something about automated messages from those 5-6 digit numbers never show up when you want them to.

Re: Tell HN: Automatic fraud detection is making my life hell

#122
post #113

I have such immense disdain for Capital One and MasterCard for how they implement 3DS. I have been in Germany for 6 weeks. I have spent thousands of dollars between flights, train tickets, and hotels. Guess what I have to do every, single, time I buy a 3EUR train ticket? Receive an SMS on my American cellphone number. Their "solution" is to have a family member in the US add their number to my account, wake up in the…

Can't you open an account with Revolut?

Re: Tell HN: Automatic fraud detection is making my life hell

#123
post #113

I have such immense disdain for Capital One and MasterCard for how they implement 3DS. I have been in Germany for 6 weeks. I have spent thousands of dollars between flights, train tickets, and hotels. Guess what I have to do every, single, time I buy a 3EUR train ticket? Receive an SMS on my American cellphone number. Their "solution" is to have a family member in the US add their number to my account, wake up in the…

it’s not mastercard but your bank. there are plenty of banks which implement mastercards 3ds via app (eg N26).

And here I am trying to give Capital One some good faith. I've called them three times since I've been here and they insist that MasterCard forces them to do this.

Just reaffirms my suspicions that I need to shop around. I'm traveling and putting enough money on this card to start looking at ones that actually charge a fee and have decent "rewbates", I mean "rewards".

Less sarcastically, thanks for the heads up. I'd be greatful for any other hints of people that might not hate their credit card provider they want I do.

Re: Tell HN: Automatic fraud detection is making my life hell

#124
post #113

I have such immense disdain for Capital One and MasterCard for how they implement 3DS. I have been in Germany for 6 weeks. I have spent thousands of dollars between flights, train tickets, and hotels. Guess what I have to do every, single, time I buy a 3EUR train ticket? Receive an SMS on my American cellphone number. Their "solution" is to have a family member in the US add their number to my account, wake up in the…

Can't you open an account with Revolut?

Trust me, I'm taking notes! I've tried researching this, but "credit card company that sends TOTP over email" is not really Google-able. Revolut is on my list now, though. Thanks!

Re: Tell HN: Automatic fraud detection is making my life hell

#125

Earlier quoted context omitted.

A tailscale node on your AppleTV at home will fix the issue for you.

Wireguard on a $15 Raspberry Pi Zero works as well[1], for those who don't have AppleTVs. 1. Or OpenVPN on your router. It's probably to gove yourself a tunnel to your home-network you can use from your phone or laptop from anywhere in the world. Avoid default ports if you can.

Tailscale is wireguard, just with outsourced admin.

I'm getting paid to develop and operate network infrastructure, I don't want to have a second job doing it without compensation.

Re: Tell HN: Automatic fraud detection is making my life hell

#126
post #117
post #113

I have such immense disdain for Capital One and MasterCard for how they implement 3DS. I have been in Germany for 6 weeks. I have spent thousands of dollars between flights, train tickets, and hotels. Guess what I have to do every, single, time I buy a 3EUR train ticket? Receive an SMS on my American cellphone number. Their "solution" is to have a family member in the US add their number to my account, wake up in the…

Not the same (it’s a debit card), but when Schwab locked my debit card after I tried to buy a transport pass in Poland, a quick phone call got me a human who apologized, put a travel alert on my account, and gave me $50 for the inconvenience. As for C1, they updated the app while I was in Ukraine, and it wouldn’t even let me log in; I had to use a VPN.

If Schwab would fix their account security to allow plain TOTP instead of the scam that is Symantec VIP, I would have nothing but good... well, there was the two times, yes, two times in a month that I had to spend hours on the phone telling them to stop letting people randomly transfer securities into my account without my consent. They assured me that (1) it would be illegal for me to refuse the request to take back the money and (2) that I could not block future transfers-in from happening and they could not implement a system requiring my authorization before such transfers. The clawback letter from the originating bank even pointed out that they hadn't noticed until I raised flags.

I loathe American financial companies, mostly because they all seem rankly incompetent.

Re: Tell HN: Automatic fraud detection is making my life hell

#127

that sucks man i know your pain. i hate having to jump though hoops just to do transactions online. i understand the things they do is to prevent fraud but treating everybody as a potential criminal is mildly disrespectful

> is mildly disrespectful

From their perspective (at least in this case), it's just business. Using one currency to buy gift cards in India's currency is a huge red flag in and of itself. Scammers exist everywhere, surely, but I don't know of many other countries where it's common news to see an entire office building full of scammers working telephones and computers with remote desktop sessions open on "client" computers to extort money from unsuspecting people (often using gift cards on services like Google Pay or Amazon as the vehicle.)

It's truly terrible that we live in a world where access to those services is almost a necessity for modern living, and that those services are more or less available depending on your region. It's also truly terrible that those office buildings exist. I assume the OP is on the right side of all of this, and is truly a victim of it, but it's hard for me to distinguish if I have more empathy for the innocent casualties of the war on scammers in India, or the innocent casualties of scammers in the rest of the world. Because without a basically divine way of determining guilt automatically, at least one of those groups is going to continue being slammed in the victim seat.

I'd hope that if victims of these anti-fraud algorithms in India were so prevalent, that the Indian government would do more to prevent these bad faith businesses from sprouting up in the first place. It would seem to me like that would benefit literally the entire world. Easier said than done, I'm sure. Probably even talking about an entire government reform for that effort.

Re: Tell HN: Automatic fraud detection is making my life hell

#128
post #44

I wholeheartedly support digitization, having been involved in the realms of development, system administration, and everything computer-related since my early days. However, what irks me is when I'm bound to use products or services from providers who fail to execute their roles properly despite being compensated for it. A recent incident at my child's school serves as a pertinent example. They transitioned from a t…

Well in my opinion, this is what it means to support digitisation. It means accepting that these situations will become more and more commonplace. It is simply the price you pay. In your other comment you mention that people handling email should be familiarising themselves properly with RFCs. Yeah. Maybe. Probably actually you're right. Putting aside the problem of ehether they actually _have to_ or _will_ for a sec…

No, I think the situation is more nuanced than this. Why do the people at the school have providers who only accept gmail? Because some extremely technical people who understand exactly what they’re doing have led the web further and further into platform lock-in, and others go along with it.

Re: Tell HN: Automatic fraud detection is making my life hell

#129
post #113

I have such immense disdain for Capital One and MasterCard for how they implement 3DS. I have been in Germany for 6 weeks. I have spent thousands of dollars between flights, train tickets, and hotels. Guess what I have to do every, single, time I buy a 3EUR train ticket? Receive an SMS on my American cellphone number. Their "solution" is to have a family member in the US add their number to my account, wake up in the…

> Or let's me use a Security Key.

In my region of the world there's currently one bank that lets you register such a device.

And that apparently is some sort of ground breaking innovation.

Re: Tell HN: Automatic fraud detection is making my life hell

#130

I got an Apple Card, tried buying NextDNS with it, it declined for fraud detection 9 times over a few weeks(and I manually and immediately approved the transaction after each one and also called them around the 4th time). I asked Goldman sacks , they said NextDNS is not ESG enough or some such trash. Yeah, I think we should be worried.

That seems suspect. Although it's theoretically possible to detect what your dns provider is and block it, I highly doubt GS cares enough about it to implement it.
Post reply on HN