4 ms·

Most of my banking I bootstrapped from a physical interaction. The one provider I haven't had any physical interaction with I validated on the Financial Servic

Most of my banking I bootstrapped from a physical interaction. The one provider I haven't had any physical interaction with I validated on the Financial Services Register: https://www.fca.org.uk/firms/financial-services-register https://www.fca.org.uk/firms/financial-services-register The FCA website can be validated using the UK Government website: https://www.gov.uk/registration-with-the-financial-conduct-authority https://www.gov.uk/registration-with-the-financial-conduct-a... And if someone's managed to break gov.uk then I've got bigger problems. I'll note, though, that most of the time I'm going to be using a credit card and it'll be obvious fairly quickly if whatever goods or services I've ordered don't appear. It's only really if I'm making multi-year investments (or going completely off the correct payment rails) that it's catastrophic if I make a mistake. See also: https://bam.kalzumeus.com/archive/no-payments-are-final/ https://bam.kalzumeus.com/archive/no-payments-are-final/

tptacek 5y ago
I worry a lot about making credit card transactions with websites I don't have stable credentials on, and always opt to pay via Amazon or (gak) Paypal if it's my first time buying somewhere, unless they're using Stripe.
- spearo77 5y ago
  Is there anything you check for to confirm that it is Stripe? I was deceived last week, paying for something via something that looked like an embedded Stripe payment form.
  - nybble41 5y ago
    > Is there anything you check for to confirm that it is Stripe? You check the domain name in the address bar. Embedded forms aren't safe—one must assume that the surrounding page has access to anything entered into the form, so you're not just giving your CC data to Stripe, you're also giving it to whatever site embedded the form. If you don't trust the merchant with your credit card, the only safe system is the one where you're directed to a top-level page hosted by Stripe to enter the payment details.

tptacek 5y ago

I worry a lot about making credit card transactions with websites I don't have stable credentials on, and always opt to pay via Amazon or (gak) Paypal if it's my first time buying somewhere, unless they're using Stripe.

spearo77 5y ago
Is there anything you check for to confirm that it is Stripe? I was deceived last week, paying for something via something that looked like an embedded Stripe payment form.
- nybble41 5y ago
  > Is there anything you check for to confirm that it is Stripe? You check the domain name in the address bar. Embedded forms aren't safe—one must assume that the surrounding page has access to anything entered into the form, so you're not just giving your CC data to Stripe, you're also giving it to whatever site embedded the form. If you don't trust the merchant with your credit card, the only safe system is the one where you're directed to a top-level page hosted by Stripe to enter the payment details.