4 ms·

Some companies layer external fraud protection on top of stripe. Have you tried any of those, or do you know if other payment processors (braintree, adyen, etc)

by egillie 11y ago

Some companies layer external fraud protection on top of stripe. Have you tried any of those, or do you know if other payment processors (braintree, adyen, etc) have better built-in fraud protection?

rwmurrayVT 11y ago
BrainTree is incredibly vulnerable over mobile.
- ZacDavies 11y ago
  Why do you say that?
  - rwmurrayVT 11y ago
    That's what I've heard in the circles. I'm inclined to believe it. Security over mobile is lagging behind desktop. The tools to spoof geolocation and device identity are light years ahead.
    - jtdowney 11y ago
      I'm the Security Lead at Braintree. I am not sure what you're hearing in these circles. If someone could send details to security@braintreepayments.com we'd be happy to take a look.
matthewarkin 11y ago
I like Braintree's model a bit more, the provide the API consumer with the raw AVS and decline codes from the card processor (while Stripe just says "card_declined"). Braintree also allows you to do finer grain controls such as "Decline charges that fail a zip code check for charges over $500" or "Decline if the bank doesn't support zip code checks." And with about 2 lines of code you can add more advanced things like device fingerprinting and geolocation through Kount. *Disclaimer: while I don't work for Braintree yet, I start there in June (though my experience with Stripe is very strong).
- rwmurrayVT 11y ago
  Anything PayPal is intense. Security>convience with them
- SyneRyder 11y ago
  > "Decline if the bank doesn't support zip code checks." Being able to turn that on & off would be incredibly useful. As far as I know most non-US banks don't support zip code verification, so enabling it effectively blocks international transactions. It's frustrating trying to explain to a small non-technical business the difference between "zip code check not supported" and "zip code check failed".
bdammeir 11y ago
I am the Product Manager for risk/fraud at Adyen and I can speak to our capabilities briefly. In short, we provide an in-house risk framework that has features ranging from device fingerprinting, network-based transacation linking, Dynamic 3D Secure, velocity/consistency/referral checking, behavioral analytics, and more. We feature both standard velocity-based rules and a lot of unique whitebox ML-based logic that is very open to tweaking and customization. We are in a fortunate position (being payment platform). This enables us to have access to a lot of the data necessary to identify fraud (raw issuer responses, full visibility on the auth flow, etc.), so we've been able to build a considerable tool-set. You can see our risk documentation here: https://docs.adyen.com/manuals/risk-manual https://docs.adyen.com/manuals/risk-manual And our general overview page here: https://www.adyen.com/home/payment-services/revenueprotect https://www.adyen.com/home/payment-services/revenueprotect Feel free to get in touch! brian.dammeir@adyen.com

by egillie 11y ago

Some companies layer external fraud protection on top of stripe. Have you tried any of those, or do you know if other payment processors (braintree, adyen, etc) have better built-in fraud protection?

rwmurrayVT 11y ago

BrainTree is incredibly vulnerable over mobile.

ZacDavies 11y ago
Why do you say that?
- rwmurrayVT 11y ago
  That's what I've heard in the circles. I'm inclined to believe it. Security over mobile is lagging behind desktop. The tools to spoof geolocation and device identity are light years ahead.
  - jtdowney 11y ago
    I'm the Security Lead at Braintree. I am not sure what you're hearing in these circles. If someone could send details to security@braintreepayments.com we'd be happy to take a look.

matthewarkin 11y ago

I like Braintree's model a bit more, the provide the API consumer with the raw AVS and decline codes from the card processor (while Stripe just says "card_declined"). Braintree also allows you to do finer grain controls such as "Decline charges that fail a zip code check for charges over $500" or "Decline if the bank doesn't support zip code checks." And with about 2 lines of code you can add more advanced things like device fingerprinting and geolocation through Kount. *Disclaimer: while I don't work for Braintree yet, I start there in June (though my experience with Stripe is very strong).

rwmurrayVT 11y ago
Anything PayPal is intense. Security>convience with them
SyneRyder 11y ago
> "Decline if the bank doesn't support zip code checks." Being able to turn that on & off would be incredibly useful. As far as I know most non-US banks don't support zip code verification, so enabling it effectively blocks international transactions. It's frustrating trying to explain to a small non-technical business the difference between "zip code check not supported" and "zip code check failed".

bdammeir 11y ago

I am the Product Manager for risk/fraud at Adyen and I can speak to our capabilities briefly. In short, we provide an in-house risk framework that has features ranging from device fingerprinting, network-based transacation linking, Dynamic 3D Secure, velocity/consistency/referral checking, behavioral analytics, and more. We feature both standard velocity-based rules and a lot of unique whitebox ML-based logic that is very open to tweaking and customization. We are in a fortunate position (being payment platform). This enables us to have access to a lot of the data necessary to identify fraud (raw issuer responses, full visibility on the auth flow, etc.), so we've been able to build a considerable tool-set. You can see our risk documentation here: https://docs.adyen.com/manuals/risk-manual https://docs.adyen.com/manuals/risk-manual And our general overview page here: https://www.adyen.com/home/payment-services/revenueprotect https://www.adyen.com/home/payment-services/revenueprotect Feel free to get in touch! brian.dammeir@adyen.com