4 ms·
I’ve been using stripe for about a decade on my small SaaS. This is extremely common, and all those custom rules are familiar. Stripe has the tools to deal with
by ruffrey 3y ago
I’ve been using stripe for about a decade on my small SaaS. This is extremely common, and all those custom rules are familiar. Stripe has the tools to deal with it, but you must configure it. I wouldn’t fault stripe as much as the training/docs on setting up a stripe account should include how to protect yourself from these. We’ve managed to get it down to a few fraudulent refunds per week. It’s still a big time sink. We have to implement all sorts of pre-fraud triggers within our app to try to catch them as early as possible. And review recent subscriptions daily. This seems to be the nature of the beast. A cost of doing business is losing card disputes.
- weird-eye-issue 3y agoAgreed, being able to set the rules the way they allow is very powerful and once configured should basically get rid of these attacks. But why does every merchant have to learn what rules need to get setup to prevent these attacks, it seems silly. Also what is up with their risk score in situations like this: https://news.ycombinator.com/item?id=36197303 https://news.ycombinator.com/item?id=36197303