Live data from Hacker News

Radar – A new set of integrated tools to help prevent fraud

stripe.com

71–80 of 120 posts

Re: Radar – A new set of integrated tools to help prevent fraud

#72

This looks very promising. Stripe seems to have sometimes let surprising payments through up to now, even with all the card details security checks they provided activated, and they've never supported 3-D Secure. They've also suffered from surprisingly high rates of unexpected declined charges in our experience. Hopefully if they're now rolling out more comprehensive fraud protection, that will go some way to address…

> they've never supported 3-D Secure That's a feature. It's a horrible system which I wish nobody ever used. I've literally never been able to successfully complete a transaction.

In addition to what everyone else said there are big regional effects: in North America cardholders have often never seen 3D Secure before, they don't know their passwords, and issuers don't care enough to make their authentication pages usable.

But in France and the UK it's pretty standard; cardholders are used to it, and issuers make an effort to decide whether it's worth requiring authentication.

Re: Radar – A new set of integrated tools to help prevent fraud

#73

This looks good, and is sorely needed. It seems one of Stripe's biggest risks is the impending PSD2/XS2A changes within the EU/UK. This means banks/merchants/retailers will ditch traditional card networks (and their fees) to instruct P2P payments directly. This probably opens up a host of very effective anti-fraud measures too (eg. 2FA with mobile devices). I wonder how Stripe will react to this major change in the m…

>I wonder how Stripe will react to this major change in the market?

Probably not, as they are quite US-focused and 3D-Secure is still in closed beta. Probably better margins in the US.

Re: Radar – A new set of integrated tools to help prevent fraud

#74
post #49

I work at a company with a fairly large number of transactions and we don't really have a problem with fraud. I don't know anyone else who's really battled it either. Is it much more prevalent for certain industries and products?

There are many kinds of fraud with different patterns. Some have a lot to do with what you sell, but others can affect anyone that takes credit cards. For instance, fraudsters that have received a bunch of stolen credit card numbers will want to test which cards are still good. They'll do that by making a small purchase at an online retailer, and if the charge clears, then use the card to get something illegitimately…

I remember I had to pay $10 cash to get an account on the Computer Science lab back in college. For some reason their credit card option became very popular as a way to test that cards still worked and they couldn't do anything about it.

Re: Radar – A new set of integrated tools to help prevent fraud

#75

Just checked our Stripe dashboard and it looks like this has quietly been doing good work for us for many months now blocking suspicious charges. It took me a few clicks to find https://dashboard.stripe.com/search/rules?rule_token=block_i... and after going through a few of them, the per-charge risk factor descriptions are really helpful too. The high-risk reasons are messages like: "This card has been used from an u…

Usually fraud systems are black boxes to prevent abuse, not because they can't be human readable.

I agree however that to my eye it does usually seem excessively black-box, as it's not like most fraudsters are idiots, they already know what tools are arrayed against them.

Re: Radar – A new set of integrated tools to help prevent fraud

#76

This looks very promising. Stripe seems to have sometimes let surprising payments through up to now, even with all the card details security checks they provided activated, and they've never supported 3-D Secure. They've also suffered from surprisingly high rates of unexpected declined charges in our experience. Hopefully if they're now rolling out more comprehensive fraud protection, that will go some way to address…

(I work on Radar at Stripe) thank you, and do let me know if there's anything we can do to help you get set up on Radar. Additionally, we actually do support 3Dsecure in private beta -- mind emailing me (tara@stripe.com) for access?

Thanks for the reply.

Ironically, we probably have much less interest in 3-D Secure if Radar will now let us deal with the same "sudden spike in dubious sign-ups" problem anyway.

One interesting possibility might be if the kind of rules you allow for Radar could be used to determine whether to apply 3-D Secure if it's available, so we could enable it selectively for countries where people don't already have a zip/postal code to verify for example.

However, for my own small businesses, I suspect we'll be more interested in what Radar can do, particularly to add immediate extra security checks if we are suspicious of a pattern of requests from a certain part of the world.

Re: Radar – A new set of integrated tools to help prevent fraud

#77
Most merchants don't want a rule engine, or rules. Most merchants want either a declined transaction (possibly with explanation -- possibly), or an accepted one with a guarantee against chargebacks.

If Stripe is sure that their models work, they should offload the chargebacks from the merchants.

A friend of mine worked for a startup that did exactly that. They were sold to an online payments behemoth in about 2009.

Re: Radar – A new set of integrated tools to help prevent fraud

#79
post #77

Most merchants don't want a rule engine, or rules. Most merchants want either a declined transaction (possibly with explanation -- possibly), or an accepted one with a guarantee against chargebacks. If Stripe is sure that their models work, they should offload the chargebacks from the merchants. A friend of mine worked for a startup that did exactly that. They were sold to an online payments behemoth in about 2009.

That is effectively offering insurance against chargebacks due to fraud, and such products already exist.

But I'm not wild about the moral hazards of insurance. Merchants should always exert some customer-selection hygiene.

Re: Radar – A new set of integrated tools to help prevent fraud

#80

Stripe consistently produces some of the best-looking web design out there.

I have some holiday reading to plan and would love a book recommendation from their UX/UI people. The state-of-the-art in HCI has moved on from what I learned as a novice developer in the '90s. (I already have Tufte's VDQI of course)
Post reply on HN