31–32 of 32 posts
Interesting that a prepaid gift card strongly suggests fraud. What if a person simply wants to protect his privacy?
(I work at Sift Science.) One thing to note -- our system analyzes a whole bunch of patterns for each user. So just shopping at 3am by itself won't cause problems, nor will using a prepaid gift card by itself. But if a user matches multiple fraud patterns, then they're likely to get a high fraud score.
Earlier quoted context omitted.
https://siftscience.com/docs/rest-api There is no requirement in their api to supply CC details... so no requirement to be PCI. So it would be weird if they did mention PCI... The first 6 and the last 4 is not enough to make a valid CC... And if you are still guessing the last details then it's the same as just guessing the full number. (just you'll get their quicker)
No, but 10 of 16 numbers that must conform to a checksum algorithm significantly reduces the search space to a point that a brute force seems trivial if other information is already possessed (e.g., zip code, or especially, cvv).