3 ms·
This omgchargebacks explanation came up in a previous thread about Stripe but it's silly. Stripe (et al) could just require higher risk categories complete AVS
by oliwarner 8y ago
This omgchargebacks explanation came up in a previous thread about Stripe but it's silly.
Stripe (et al) could just require higher risk categories complete AVS and 3DS to be authorised. Card companies could also manually force out-of-band verification (SMS, email, etc) you can ask but guarantee the cardholder is the card owner.
- scrollaway 8y agoThat's coming pretty soon actually. The EU is bringing new rules live in 2019 which will require everyone to do that stuff.
- oliwarner 8y agoI didn't know that, thanks. Yeah that adds the requirement for two factor authentication with flexible out of band options, by September 2019. http://europa.eu/rapid/press-release_MEMO-17-4961_en.htm http://europa.eu/rapid/press-release_MEMO-17-4961_en.htm So yes, this further lessens the risk of "that wasn't me" when a significant-other checks the bank statement and sees a pile of porn purchases. That's the historical risk element of legitimate adult transactions. Perhaps the card processing chain will relax after that.