Live data from Hacker News

Tell HN: Automatic fraud detection is making my life hell

news.ycombinator.com

211–220 of 406 posts

Re: Tell HN: Automatic fraud detection is making my life hell

#211
post #203

As someone who's previously been involved in KYC/AML I've a long held suspicion that these policies are in place to benefit the United States while deliberately inconveniencing everyone else.

That's exactly what they are for. KYC/AML is just the financial arm of their total global surveillance program.

Re: Tell HN: Automatic fraud detection is making my life hell

#212
post #105

Earlier quoted context omitted.

Or, like the original post said, use Tailscale, which can punch a hole through the NAT for you.

Port forwarding is easy and self-reliant compared to using a third party's free service though Not saying that's for everyone but I do feel like the default should be to click the two buttons in your router interface and third parties a fallback option or conscious choice. Probably just as quick as signing up for tailscale, if it weren't for that all routers feel like they need to reinvent a UI so it's never twice th…

Not everyone can get port forwarding, though. If you're stuck behind one of those terrible CGNAT+no IPv6 ISPs, you can't host your own services from home that easily. There are more of those shit tier internet providers out there than you'd hope or expect.

Re: Tell HN: Automatic fraud detection is making my life hell

#213
post #137

Earlier quoted context omitted.

The problem with many of these examples is that 99% of the time, it is a sign of fraud, and 1% of the time it’s a false positive. > If a person's mobile phone number is associated with VoIP or Google Voice, that indicates fraud. I’ve been using this heuristic (along with VPN and IP geo lookup) when screening job candidates after a massive influx of developers outside the US applying for US-only remote roles. I discov…

> I wish there were a way to detect fraud while never having a false positive. There is: networking. People you trust will tell you about candidates they know about. > it’s also not realistic to optimize for the 1% It's not about what's realistic, it's about what's right. Nobody should be falsely treated like a criminal. That 1% should carry enough legal liability to completely offset if not exceed the gains of preve…

It’s acceptable to reject a candidate because they’re not “a friend of a friend”, but it’s not acceptable to reject a candidate because they submitted an application with an IP address from Pakistan with a VOIP phone number?

Re: Tell HN: Automatic fraud detection is making my life hell

#214
post #137

Wrong assumptions programmers make about fraud prevention: -- A mobile phone number uniquely identifies a single person. -- Every person has a mobile phone number and they only have one mobile phone number. -- If a person's mobile phone number is associated with VoIP or Google Voice, that indicates fraud. -- Every person always has their mobile phone handy and it is always able to receive calls and SMS messages under…

The problem with many of these examples is that 99% of the time, it is a sign of fraud, and 1% of the time it’s a false positive. > If a person's mobile phone number is associated with VoIP or Google Voice, that indicates fraud. I’ve been using this heuristic (along with VPN and IP geo lookup) when screening job candidates after a massive influx of developers outside the US applying for US-only remote roles. I discov…

Tragedy of the Commons Ruins Everything Around Me.

Re: Tell HN: Automatic fraud detection is making my life hell

#215
post #203

As someone who's previously been involved in KYC/AML I've a long held suspicion that these policies are in place to benefit the United States while deliberately inconveniencing everyone else.

That's exactly what they are for. KYC/AML is just the financial arm of their total global surveillance program.

I'm talking more in terms of retaining a competitive advantage. The processes you might implement in Japan wouldn't be implemented in the US despite them having a basis in international law.

Re: Tell HN: Automatic fraud detection is making my life hell

#216
post #158

Earlier quoted context omitted.

Interesting. I was considering opening a second account specifically as a backup card and hedge against lockouts while travelling, and Schwab was high on my list, but it sounds like based on your experience that they are not fit for purpose.

The way it was explained to me is that this (a glorfied Excel sheet of transfers that get executed at a certain hour of each day) is just how intra-bank securities transfers work and that I mostly got unlucky that (1) the intended recipient was at Schwab (2) whoever was doing these transfers has dyslexia and my account was a number transpose off. For the most part, their customer support has been excellent. I had an…

Thanks for the information!

Re: Tell HN: Automatic fraud detection is making my life hell

#217

Wrong assumptions programmers make about fraud prevention: -- A mobile phone number uniquely identifies a single person. -- Every person has a mobile phone number and they only have one mobile phone number. -- If a person's mobile phone number is associated with VoIP or Google Voice, that indicates fraud. -- Every person always has their mobile phone handy and it is always able to receive calls and SMS messages under…

I'll add another to that list: -- People will never have a physical mailing address that contains "funny" numbers like "000", "420", "69420", or "80085".

I used to live in Baltimore, where there are numbered streets that include ½ symbol streets, and worse, house numbers including ½ numbered houses.

Re: Tell HN: Automatic fraud detection is making my life hell

#218
post #91

This sort of thing is where I hope Bitcoin can help more people.

> This sort of thing is where I hope Bitcoin can help more people. It is a use for a Bitcoin like system (The transaction costs, planet destroying character, and slow speed probably not Bitcoin) It is the intersection of money laundering and normal requirements Stopping crime by stopping money laundering will always have these problems, surely? Is there a way to inhibit CC fraud, and money laundering without making l…

> Stopping crime by stopping money laundering will always have these problems, surely?

I believe so. The optimal amount of fraud is non-zero.

https://news.ycombinator.com/item?id=32701913

Re: Tell HN: Automatic fraud detection is making my life hell

#219
post #124

Earlier quoted context omitted.

Can't you open an account with Revolut?

Trust me, I'm taking notes! I've tried researching this, but "credit card company that sends TOTP over email" is not really Google-able. Revolut is on my list now, though. Thanks!

Amex UK gives the option to receive OTP via email or SMS.

Looks like Amex US is similar: https://www.americanexpress.com/us/security-center/safekey/

Re: Tell HN: Automatic fraud detection is making my life hell

#220

Wrong assumptions programmers make about fraud prevention: -- A mobile phone number uniquely identifies a single person. -- Every person has a mobile phone number and they only have one mobile phone number. -- If a person's mobile phone number is associated with VoIP or Google Voice, that indicates fraud. -- Every person always has their mobile phone handy and it is always able to receive calls and SMS messages under…

I'll add another to that list: -- People will never have a physical mailing address that contains "funny" numbers like "000", "420", "69420", or "80085".

I once had a friend that lived at, no shit, 1337 High.
Post reply on HN