3 ms·

Yes they're aware. Fees are already capped. I'm not collecting CC data.

• jasonlotito 16y ago
  That's cool. Far too many people ignore what a solid relationship with the upstream payment provider can give you. Glad the fees are capped. I saw a $100 link, so not sure about what the cap is. As for collecting CC data, if it's passing through your code, even if you don't store it, you are accountable for it. I've seen the silliest things with people claiming they aren't storing CC data. And yet, you can browse file after file of automatically generated logs that contain raw CC data. That you aren't storing CC data makes your life easier. However, I'd still review what you are liable for just in case. I don't say any of this bash you (I really like the idea!), but so you avoid any problems that cause you to shut down (because it's a cool idea!). I've been doing this for 10 years now, and as soon as someone opens up a payment system like this, money laundering and other schemes will review how to abuse it. So when I see something like this, I get nervous. I ask: how would I exploit it.
  • Natsu 16y ago
    > I've been doing this for 10 years now, and as soon as someone opens up a payment system like this, money laundering and other schemes will review how to abuse it. So when I see something like this, I get nervous. I ask: how would I exploit it. Maybe you should write a guide of all the ways you've seen people go wrong and the best ways to do things (and why). That could be useful to a lot of people on HN.
    • jasonlotito 16y ago
      I should. =) I take what I know for granted too much, I think.
    • forensic 16y ago
      He could sell the guide on Gumroad