23 ms·
Ask HN: How does onlyfans.com work around the “no porn” Stripe rule?
For reasons beyond this ask, I'm needing to use a payment processor that is fine with high-risk transactions (which the porn industry certainly fits in) so started looking around what adult websites are using.
Many are using probiller, vendo and similar, since Stripe and others have rules against porn/adult industry, citing high risk transactions for this.
But then I came across onlyfans.com, which is using Stripe for its payments, although Stripe has a strict "no porn" rule in their terms of service.
How does this work? Onlyfans is by now a huge website, with lots of transactions, so it's surely not flying under the radar. It's the only adult website I could find that is using Stripe.
Is it as simple as they have an agreement with Stripe to bypass the rule? Or am I missing something else obvious here?
- maps7 6y agoProbably cause Stripe likes money?
- european321 6y agoOf course they like money, that's why the rule is there in the first place. High amount of chargebacks and fraud costs them money.
- voxic11 6y agoA company I worked for tried to use Stripe but couldn't because they don't allow "fantasy sports leagues with cash prizes". They definitely aren't willing to make exceptions for everyone.
- gowld 6y agoIn practice, unregulated online gambling is much closer to fraud than porn.
- s_dev 6y agoThey won't operate online pharmacies. Not because they aren't legit one but because there are so many bad actors out there they just won't engage with pharmacies -- we tried setting one of the up with a cashless solution but Stripe didn't want to.
- raxxorrax 6y agoProbably because the content is not public. I heard users just share cat pictures, so there is plausible deniability.
- deleted 6y ago[deleted]
- 0xy 6y agoMy guess is Onlyfans has a very low rate of chargebacks/fraud and negotiated a special deal with Stripe. The reason that rule is there is because most adult sites are dodgy.
- fl0wenol 6y agoI suspect Onlyfans (like Patreon) has social pressure going for it such that fewer people issue chargebacks because it'd be like yanking back money directly from a person and not a faceless company; like the social pressure against leaving a shitty tip at a restaurant.
- hobofan 6y agoDoesn't Patreon (which also has a lot of porn content) also use Stripe as a payment processor?
- breakingcups 6y agoPatreon did crack down on some extreme content, stating they were forced to do so by their payment provider(s).
- dzhiurgis 6y agoWeird they wouldn't switch providers for specific use cases. Does Stripe require to be exclusive provider for site?
- ceejayoz 6y agoThe other providers have similar rules.
- lovegoblin 6y agoThere are very few payment processors that will accept adult content, and those that do exist (e.g., CCBill) are both expensive - on the order of 10x the fees - and also a damn nightmare to work with. I can very easily imagine a scenario where Patreon looked at their options and decided it wasn't worth it.
- throwaways885 6y agoAre you referring to the censorship which is in the process of tanking the site? https://www.i24news.tv/en/news/international/americas/1596377657-court-rules-against-patreon-fan-funding-service-in-key-case-over-cancelled-comedian https://www.i24news.tv/en/news/international/americas/159637...
- ceejayoz 6y agoNo, Patreon made much more broad changes a few years back (https://www.vice.com/en_us/article/kz3x5z/heres-how-patreon-politely-makes-it-impossible-for-adult-content-creators https://www.vice.com/en_us/article/kz3x5z/heres-how-patreon-...) affecting all sorts of adult content. Benjamin got banned for saying stuff like: > Really what [Hitler] was trying to do was clean Germany, clean it of the parasites, of the fleas. He did not hate Jews. He hated filth and he was trying to clean up. and is similarly banned from Facebook, YouTube, PayPal and Twitter. They just don't have company-pays forced arbitration provisions that can be turned back on the company like Patreon does. DoorDash had the same DDoS issue with their arbitration clause, no free speech issues required. https://www.vox.com/2020/2/12/21133486/doordash-workers-10-million-forced-arbitration-class-action-supreme-court-backfired https://www.vox.com/2020/2/12/21133486/doordash-workers-10-m...
- Hackbraten 6y agoWhy do you think the porn industry is prone to more fraud/risk?
- tinus_hn 6y agoA man orders porn and pays using his credit card. His wife looks at the statements and asks him what he’s up to. He denies having made the payment so the wife initiates a chargeback.
- im3w1l 6y agoI kinda wonder if it isn't the kids doing it with a parents card.
- wil421 6y agoMy friend and I were 13 and called 1-900 numbers back when it was popular. We took his moms credit card and changed some numbers around. Eventually a number we made up worked. It was a hilarious moment but I was scared to death we would be found out. Nothing ever happened but somebody got a charge.
- saagarjha 6y agoDo they not ask for a CVV or any other verification?
- soylentcola 6y agoWe did something surprisingly similar once as stupid kids/teens and it was in the days before CVV. Just touch tone to enter a card number (although we did this little experiment from a payphone using a 1-800 (toll free) sex line). Typically, you entered a card number after some initial "pitch". AFAIK, 1-900 numbers only worked by billing you on your phone bill.
- 6y ago
- tootahe45 6y agoMaybe Stripe CEO is a simp?
- __ryan__ 6y agoOnlyfans is a platform for content subscriptions. It just happens to be a popular platform for adult content. Also, it surely makes them a ton of money.
- wil421 6y agoRight and backpage was just a site for lonely singles looking to connect.
- __ryan__ 6y agoStripe’s TOS is there to protect itself. They can point to the “no porn” rule if they ever need to cut ties with OnlyFans, but until then, they will reap the benefits of their partnership. It’s a win-win for Stripe.
- m11a 6y agoPretty sure if a company intentionally refuses to enforce a provision of its terms (rather than not realising), it would be a bit more of a legal tangle if they decided to arbitrarily rely on said provision one day to cut ties. So I don't think that'd work.
- lovegoblin 6y agoYou can say this about literally anything: Pornhub is just a platform for VOD. It just happens to be a popular platform for adult content.
- __ryan__ 6y agoI think that’s a stretch. There _is_ a line and OnlyFans is at the very least _on_ it. While I am aware of the adult content on the site, the only people that I know of that use OnlyFans are subscribing to physical training, musical talent, or other creative content. Unironically.
- andoriyu 6y agoIt would be hard to pretend that resources named "pornhub" is not porn and just happened to host a lot of porn...
- utf_8x 6y agoMy guess would be that Onlyfans do a lot of fraud prevention on their end and negotiated an exception with Stripe...
- tyingq 6y agoSomewhat related, a story that digs into who's running onlyfans.com: https://forensicnews.net/2020/08/13/onlyfans-faces-allegations-of-fraud-theft/ https://forensicnews.net/2020/08/13/onlyfans-faces-allegatio...
- everybodyknows 6y ago> Weeks before Radvinsky purchased the OnlyFans holding company in the United Kingdom, he received a $250,000 tax credit from the state of Illinois. “The purpose of the Angel Investment Tax Credit Program is to attract and encourage the placement of investment dollars into early-stage, innovative companies throughout Illinois.” Your tax dollars at work.
- nipheld 6y ago> Your tax dollars at work ...creating high-tech well-paying jobs in the local area. Is that a problem?
- pessimizer 6y agoYou might think that if you'd never worked for a state finance authority, or for the state of Illinois. It's certainly what's on the press release.
- KaoruAoiShiho 6y agoYou know what a credit is?
- djellybeans 6y agoIt only takes the word "tax" to make many people internally scream. Crude heuristics, but hey it's human programming.
- us0r 6y agoThis has to be the biggest pile of garbage I have ever read. No doubt the guy is probably not a saint but the article starts with the site being worth "between $810m and $936m." and ends with him pivoting into drug smuggling? according to "xoxgoldenfox"?
- adwi 6y agoMy understanding is the rules are dictated by Visa/MC/Amex, and are largely based on chargeback risk for categories of merchants. There are likely further legal and pearl-clutchy reasons that combine to just out and out ban. Anecdote: we talked with every payment processor around for a product we were making that involved storing and spending value from a digital wallet. It was close enough to various Visa/MC rules and money transmitting statutes that the usual response was arguing for a few weeks about why we comply until higher management decided something akin to: well if you had a lot of volume we’d take the risk dealing with it, but you don’t so it’s not worth our time. Last ditch effort was Stripe, who said: sure! And we asked again with more detail, making sure they saw the same issues and wouldn’t make us tear it down in a month. They said: sure! Did it a third time higher up for diligence, and finally just came to the conclusion they have different priorities and are getting big enough to use their scale to throw some weight around for all the small merchants.
- preinheimer 6y ago+1 to the rules coming down from Visa & MC. Amex doesn't allow adult. There's a bit more nuance there, as the rules actually come from the bank issuing your merchant account, rather than some master "Visa" entity. So if you're a big player in the adult game you're going to work to find the right banks willing to issue you merchant accounts. Those banks will also have a compliance department which will look at your content and make sure it's inline with what they're willing to allow. If you want to make adult content where consensual adults do things together there's one group of banks you can go to. If you want to make niche content with acted out violence and such you're going to find a much smaller group of banks willing to issue you merchant accounts. Or possibly no banks at all. It's interesting that the thing deciding what adult content will be easily monetizable on the internet is small merchant account issuing banks. On the charging side I believe Stripe uses Wells Fargo, which has pretty strict rules. Source: worked for one of the large players in the adult market a while back. Some info may be dated. Note: one of the fun things about credit cards is that Visa and MC are issued by banks, and Amex is issued by Amex. There was a new fraud style a few years ago that amex was able to lock down pretty quick due to its centralized nature, while Visa and MC had a harder time. Note2: I may define fun differently than you.
- euix 6y agoHow much of the internet traffic is actually pornography in general? I have heard a lot of anecdotal hearsay that it constitutes a majority.
- BurningFrog 6y agoHow would anyone know that? My guess is most of traffic is various intelligence agencies copying all other traffic in the world.
- barrkel 6y agoI'm pretty sure it's 80% spam, 80% pornography and 80% streaming video.
- dylan604 6y agoThe 80-20 rule strikes again. Such an amazing statistic.
- elorant 6y agoThe thing about the online porn industry is that it's highly diversified which leads a lot of people into making wild assumptions about its size. I doubt porn traffic is that high. Stats show that one in three Internet users are viewing porn, but the thing is that porn isn't something you can spend more than 10-20 minutes consuming[1]. So if we say that the average user spends some three hours online on average every day[2], then porn is about 5% of that time. So one in three users online spend 5% of their time watching porn. In total I'd guess that doesn't account for more than 10% of global traffic, taking under consideration that video consumes much more bandwidth than other forms of content. That's all back of the envelope calculations off course. [1] https://www.pornhub.com/insights/2019-year-in-review#traffic https://www.pornhub.com/insights/2019-year-in-review#traffic [2] https://www.statista.com/statistics/319732/daily-time-spent-online-device/ https://www.statista.com/statistics/319732/daily-time-spent-...
- whatsmyusername 6y agoMaybe YOU can only spend 10-20 minutes :D
- tzs 6y agoHow do you find out what payment processor(s) a given site uses? I know that some provide methods whereby a site can have the actual payment entry form served and processed by the payment processor instead of by the site's own server, so you'd be able to see from the user's end where they payment is actually being processed. I've never done a survey, but just anecdotally most sites I've encountered seem to not be using that option. Their payment entry form comes from their own site and posts back to it, where their own back-end handles dealing with their payment processor's API. Using the method where the user interacts directly with the payment processor does have the advantage that it simplifies PCI compliance. If your systems never even see the credit card, just receiving a token from the payment processor at the end of the transaction that you can use to initiate subsequent on-file or recurring transactions, most of PCI goes away for you. On the other hand, that also means that you are stuck with that payment processor for on-file or recurring transactions for that customer. Your token from payment processor X is completely worthless for doing charges at payment processor Y. If I was in a business that has a significantly above average risk of running into payment processor trouble so I might need to change processors, I'd want to store the credit cards myself. That makes it possible to change payment processors without having to get all of your subscription customers to come back and re-enter credit card information [1]. [1] Well...at least for now. I'm not sure if that will still be possible if the Visa stored credential framework ever actually becomes required. Briefly, under the SCF requirements when you store a credit card, you have to send a flag to Visa with the transaction saying you are storing it. On subsequent on-file or recurring transactions, you have to send a reference to the transaction that stored the card. The problem is that you reference that transaction by sending Visa's transaction number. But Visa's number for transactions is generally not the transaction number you get from your payment processor. The payment processor has its own transaction numbers and those are what you see. I believe MC is also doing SCF. Not sure about Discover and Amex. It was supposed to become mandatory something like two or three years ago, but payment processors kept asking for extensions.
- capableweb 6y ago> How do you find out what payment processor(s) a given site uses? I'm a developer so looking at what kind of request the application is doing when interacting with anything involving payments. In the case of OnlyFans it was easy as they make direct requests to Stripe. In other cases, I've looked at the data structures stored in the current page by using the JS console and compare it to the API docs of various payment processors.
- therealmarv 6y agoThey are NOT using Stripe. Stripe has a no porn rule because they want to go public at some time and everything needs to look clean, also on their customer side. Also their (Stripe) backend banks don't tolerate porn. Also there is not only Stripe out there! Btw. you are in the wrong forum. Look on gfy.com forum for example
- capableweb 6y ago> They are NOT using Stripe Take a look at the requests their frontend is making and you'll see they are indeed using Stripe. At least they were last time I checked. > Also there is not only Stripe out there! Indeed, I listed some of the alternatives in my opening question, but is besides the point anyways, here we're discussing Stripe + OnlyFans. > Btw. you are in the wrong forum. Judging by the number of upvotes and comments, no, I'm not. > Look on gfy.com forum for example Thanks for the pointer, I'll take a look there.
- larrik 6y agoThat's a good question, since Stripe backed out at the VERY last minute for a customer of mine who sells alcohol over the internet, despite repeated assurances it would be fine.
- edwinwee 6y agoStripe can typically support alcohol businesses (assuming they hold the appropriate licenses). Could you get in touch at edwin@stripe.com and we can take another look?
- larrik 6y agoThis was quite a few years ago, and it'd likely be hard to make a case to switch back.
- ocdtrekkie 6y agoI love the subtle indication here that someone who almost certainly knows "the" authoritative answer to this thread is reading it. Though obviously I understand why you probably aren't at liberty to answer the question.
- anonymoushn 6y agoStripe also cannot support shops where one can order physical items with user-submitted images printed on them apparently.
- mrdumas 6y agoSince, I know a friend in this industry, let me explain what's going on here. Yes, OnlyFans uses Stripe, but that's not the entire story. In the adult/porn world, there's a high amount of chargebacks and fraud relative to low-risk industries like SaaS software. If you pass a certain chargeback threshold in the adult industry, your account is terminated, and no payment processor will do business with you. To reduce the likelihood of passing that chargeback threshold and being banned, OnlyFans uses "cascading payments", which essentially load balances the payments across multiple payment processors in order to reduce their chargeback ratios across their merchant accounts. The payment is either processed by Stripe, Securion, CCBill(the leading payment processor for adult), or another company. Last time I checked the network requests, I noticed it was storing the card on Stripe, CCBill, and Securion, but using CCBill or Securion to process the payment. I think Stripe is there for models on the site who don't sell adult content. OnlyFans probably does a check to see if the page is adult-related and if it is, then routes it to the correct payment processor.
- deleted 6y ago[deleted]
- techsin101 6y agoloading across multiple providers won't alter the chargeback ratio so what is the point?
- capableweb 6y agoYou could (in theory) do some risk analysis and put the ones with the highest risk into the providers where you had the lowest chargeback. Wouldn't be 100% solution, but could get you there.
- netsharc 6y agoI wonder if they do do that. In Germany there's a credit rating agency that more or less has a monopoly, and everyone has more or less a profile with data supplied by companies who've dealt with them commercially (e.g. if you signed a phone contract or opened a bank account). But sometimes their algorithm would also try to predict the chances of people not paying bills by things like the ZIP code where they live...
- disillusioned 6y agoCascading payments might be the real answer, and shuffling higher risk charges to non-Stripe providers, but in my experience, Stripe can get pretty moralizing pretty quickly. We built an adult ecommerce site (purely toys for purchase, no porn) and because other adult toy sites had been successful on Stripe, Stripe assured us this wouldn't be a problem. Six months and several million dollars processed later, Stripe informs us we're going to be deplatformed because Wells Fargo (their banking partner) had reviewed our account (apparently because of its volume) and determined we violated their standards because of the nature of the toys. We did a bit of back and forth where Stripe suggested we alter the colors available (seriously) to assuage Wells Fargo's puritanical concerns, and Stripe insisted it wasn't _their_ moralizing, but rather Wells Fargo (paragons of fucking virtue as they are), but we weren't willing to compromise on the nature of our product or have our product's options or colors dictated to us by one of the most corrupt banks on the planet. We ended up deplatforming and moving to a high-risk processor who was willing to match our competitive Stripe rate. That processor sucks and their fraud protections are weak and their interface is garbage, but they're not telling us how to run our business. Was mostly disappointed that we went through an arduous review process with Stripe beforehand and received assurances we'd be fine since our chargeback rate is insanely low and we ship actual physical product and have no nudity on our site, but alas.
- lovegoblin 6y agoUnfortunately exactly 0% of this story surprises me. > That processor sucks and their fraud protections are weak and their interface is garbage I have three guesses and they're all CCBill.
- telaandrews2 6y agoLOLZ I was waiting for someone to call them out. I haven't looked at their interface in decades, but last time I looked it was decades out of date. Payments is the most profitable niche in the porn industry.
- lovegoblin 6y ago
- tejasmanohar 6y agoMany of the rules aren't rules. We ran a travel company and used Stripe in the past, which is also one of the disallowed industries. We got approval from Stripe after proving that we have a negligible fraud & chargeback rate due to being focused on business users
- lovegoblin 6y agoYeah this is something I think a lot of people in this thread are missing: OnlyFans is probably big enough that they can negotiate their contract with Stripe.
- dotBen 6y agoThis, one of the biggest blinkers technically-inclined founders have is that they forget or ignore that so much is relationship driven. Rules like Stripes (+ Wells Fargos) are not interpreted like code, everything is open to negotiation and degrees of freedom depending on the relationship established.
- Nasrudith 6y agoThose blinkers are called "not being utterly insane". The whole model of disruption is seeing a stupid practice saying. "No we aren't doing that stupid shit." watch practicioners of the existing stupid froth at the mouth and then either succeed or fail. Seriously that is why honor based lending died to banks centuries ago. Relationship driven is a fucking stupid way to do finance.
- michannne 6y agoThat's an ideal. At the end of the day these are human-run industries, relationships are a big part of that.
- dotBen 6y agoFinance is totally relationship driven (and 'honor systems' isn't really a good example of it). My bank waives fees on everything because of my personal friendly relationship with my banker. They gave me preferred terms of my mortgage rate because of my formal relationship - it wasn't just the product of a formula at the end of the banker's computer screen. I know they'll do all sorts of shit for me because of the hard (account age, $$) and soft (personal) relationship. But my point is more broad - API agreements come to mind as an example, just because that is a space I've played in prior jobs. "But the API Ts&Cs say you can't do xx but they are doing xx". Yeah, they have a relationship and got a dispensation.
- claydavisss 6y agoOnlyFans is hip, edgy, and if you squint hard enough, a vehicle for feminist liberation. Hip waifs from SOMA are on OnlyFans, while BangBros has to slum it with Eastern Europeans. One is "cool", one is sleazy. That is the real answer.
- gojomo 6y agoOften, when the market doesn't provide an essential gateway service to a law-abiding subpopulation, some sort of 'public option' is proposed. Not enough market housing, offer public/subsidized options. Not enough low- or no-cost private education, offer public schools. Too little affordable healthcare/insurance, offer Medicaid, a 'public option', single-payer. Public transport. Should the government offer a 'public option' payment-processor of last resort, with guaranteed service for all legal but unpopular businesses? A service that couldn't reject camgirls, weed-sellers, Alex Jones, gun shops, etc?
- icelancer 6y agoWe call this Bitcoin.
- Noos 6y agoYou have this already. It's called "using checks and money orders." The problem is that people want the convenience credit cards use, and don't want to wait for the check to clear to get their stuff.
- jimmydorry 6y agoBanks can and will close your account for any reason under the Sun. How do you write a check or receive one without a bank account? I'm not familiar enough with money orders, but I assume the same applies. Then, on top of all of that, you can't run a business through a personal account. So you still require a business type bank account, and the above options are terrible for any eCommerce site, which is pretty much the only kind of business that will be discussed here on HN.
- totalZero 6y agoYou can get a money order without a bank account. There's often a limit on the amount, so in some cases you may need to buy several in order to amass the full balance. You may also need to show ID. You can also cash a money order without a bank account.
- 6y ago
- truthwhisperer 6y agoasking for a friend i think?
- Sindrome 6y agoThere are other payment processors other than Stripe.... Ever heard of CCBill?
- rmoriz 6y agoWho is behind CCBill and what does it need to launch a competitor?
- mudlus 6y agoThis thread is a aompelling argument for Bitcoin/LN as an intermediary--just saying. It's getting easier every day. Bisq for exchange will get easier over the next 5 years or so, too.
- orthecreedence 6y agoIt would be nice to see Bisq start to get more liquidity. It seems like a really interesting way to sidestep traditional banking on/off ramps for crypto. It's almost like local bitcoins with ACH. I have to admit I don't fully understand how it handles disputes. I probably need to look a bit closer.
- ecommerceguy 6y agoWe would use a multi-gateway round robin setup for volume over 50k per month. I'm more than willing to point you in the right direction.
- bokohut 6y agoAs a payment processing fintech builder for several decades the many comments about diversifying across processors is correct. The misunderstanding here for many may be that knowledgeable business owners (merchants) always have more than one processing account each with a different entity holding the risk, think multiple banks. Having multiple processors, aside from the point of this question, directly relates to up time and availability of which nearly all rely on the "middleman" - Have a backup! However problem businesses and their business owners that get caught being nefarious earn a permanent place on the card brands "list" that forbids them from taking card payments in the future. An individual business can have multiple merchant accounts and as with anything else once one understands how a system works it can then be manipulated to fit ones need.
- rglullis 6y agoWould it be possible to sidestep the issue completely? Is your industry one that you could start pushing for cryptocurrency for payments? You'd be basically reducing your risk to zero and by using a stable token you would also have no volatility.
- frankdenbow 6y agoOnlyFans isnt a porn site in the same way that Twitter isnt a porn site. Many of the high profile users are in the adult industry but people use onlyfans for other types of content as well.
- dewlinedew 6y agoYea me mum sells erotic art on there
- mfkp 6y agoI'd venture to say that 99% of onlyfans content (that people are paying for anyway) is porn. Just because there's a small subset of non-porn doesn't change the fact that they're selling access to porn. Twitter is a completely different story as they're selling advertising, not access to nudes.
- bravura 6y agoIf anyone is interested in talking about fraud prediction or high risk adult payment transactions, I have been looking at this space and think there are some interesting opportunities. Email in profile.
- Buy_Meds_Online 6y agohttps://getbestpleasure.com/ https://getbestpleasure.com/ https://getbestpleasure.com/ https://getbestpleasure.com/ ::. Portrayal ::. Costs ::. Suggestions ::. Safety measures