Live data from Hacker News

Tell HN: Automatic fraud detection is making my life hell

news.ycombinator.com

231–240 of 406 posts

Re: Tell HN: Automatic fraud detection is making my life hell

#231
post #141

Wrong assumptions programmers make about fraud prevention: -- A mobile phone number uniquely identifies a single person. -- Every person has a mobile phone number and they only have one mobile phone number. -- If a person's mobile phone number is associated with VoIP or Google Voice, that indicates fraud. -- Every person always has their mobile phone handy and it is always able to receive calls and SMS messages under…

All these can be the wrong assumptions for sure. Working in a space with some fraud though I can tell you the majority of users verify fine and there ate only the few percentage that don’t for any number of reasons some what you have given above. For smaller vendors though things to consider are - a charge back can come up to 6 months later. A loss of that is not only a loss of funds but a charge back fee - too many…

[dead]

Re: Tell HN: Automatic fraud detection is making my life hell

#233
post #124

Earlier quoted context omitted.

Can't you open an account with Revolut?

Trust me, I'm taking notes! I've tried researching this, but "credit card company that sends TOTP over email" is not really Google-able. Revolut is on my list now, though. Thanks!

Now try logging into your email account to get those OTPs when traveling through China... :(

Re: Tell HN: Automatic fraud detection is making my life hell

#234
post #124

Earlier quoted context omitted.

Can't you open an account with Revolut?

Trust me, I'm taking notes! I've tried researching this, but "credit card company that sends TOTP over email" is not really Google-able. Revolut is on my list now, though. Thanks!

You can verify purchases in app with Wise (aka transferwise). A kinda travel / international card.

Re: Tell HN: Automatic fraud detection is making my life hell

#235
post #124

Earlier quoted context omitted.

Trust me, I'm taking notes! I've tried researching this, but "credit card company that sends TOTP over email" is not really Google-able. Revolut is on my list now, though. Thanks!

Welcome to 21st century! I travel with debit cards from 3 different banks for this reason. Look for banks that issue virtual cards that can be used with Apple Pay / Google Pay. But you also need ideally two physical cards, since one bank may block your physical card for "fraud" while traveling, and now you're stuck and unable to buy a train ticket. Credit cards are only necessary for car rentals, which is a major pai…

Also need credit cards for some hotels, and a high limit if you plan to stay at several hotels in quick succession, as it takes a few days to weeks for a hold to be released.

Re: Tell HN: Automatic fraud detection is making my life hell

#236

Wrong assumptions programmers make about fraud prevention: -- A mobile phone number uniquely identifies a single person. -- Every person has a mobile phone number and they only have one mobile phone number. -- If a person's mobile phone number is associated with VoIP or Google Voice, that indicates fraud. -- Every person always has their mobile phone handy and it is always able to receive calls and SMS messages under…

I'll add another to that list: -- People will never have a physical mailing address that contains "funny" numbers like "000", "420", "69420", or "80085".

What’s funny about 420?

Re: Tell HN: Automatic fraud detection is making my life hell

#237
post #213

Earlier quoted context omitted.

It’s acceptable to reject a candidate because they’re not “a friend of a friend”, but it’s not acceptable to reject a candidate because they submitted an application with an IP address from Pakistan with a VOIP phone number?

In the first case, you're not rejecting candidates at all. Nor are you treating them like potential fraudsters.

The result is the same, and it's the result that is the issue. If potential applicants aren't given consideration because they're not in the network, it doesn't matter that the hiring committee thinks they're innocent, or isn't technically rejecting them.

It's a bad heuristic.

Re: Tell HN: Automatic fraud detection is making my life hell

#238

Earlier quoted context omitted.

I tried to place some online bets for a friend who is in prison. But the betting sites don't allow you to use an ethernet cable to connect to your router o_O (unless you also enable wifi.. except my desktop doesn't have wifi) https://helpcenter.il.betrivers.com/hc/en-us/articles/360049...

What is the heuristic they are checking for here? That problematic actors overwhelmingly will be unable to show an active wifi adapter?

I'm guessing that's bots in data centers.

Re: Tell HN: Automatic fraud detection is making my life hell

#239
If a business is the source of too much fraud, the payment processors will naturally cut them off, which has the side effect of forcing them all to try their best to stem the bleeding.

With the natural problem that many of them won't be all that good at it.

Re: Tell HN: Automatic fraud detection is making my life hell

#240

Wrong assumptions programmers make about fraud prevention: -- A mobile phone number uniquely identifies a single person. -- Every person has a mobile phone number and they only have one mobile phone number. -- If a person's mobile phone number is associated with VoIP or Google Voice, that indicates fraud. -- Every person always has their mobile phone handy and it is always able to receive calls and SMS messages under…

I'll add another to that list: -- People will never have a physical mailing address that contains "funny" numbers like "000", "420", "69420", or "80085".

I used to work in a building in SF where the address was either 123 Main St. or 123 Mission St. Someone in sales had an issue giving that address to a cab driver, IIRC. Amusingly, the company did (and still does) ML for fraud detection.
Post reply on HN