4 ms·
> 3. Credit card number was pasted instead of typed. This wouldn't probably work. You have to consider that some browsers (eg. Chrome) save the CC data, so you
by agopaul 11y ago
> 3. Credit card number was pasted instead of typed.
This wouldn't probably work. You have to consider that some browsers (eg. Chrome) save the CC data, so you don't have to type them. This validation step would block legit customers from buying what they want.
Also, bots can run on real browsers simulating real humans using infected PCs as proxy so that their IP addresses result on the same country/state of the real customer.
- ianhawes 11y agoThe jQuery event "pasted" seems to work well. And it was used in our fraud scores, so it didn't necessarily block the tx, just score it.