3 ms·
Are the fraudsters using the charity website itself for confirmation that the card works? Could you run them off by just always displaying success for any sane
by bcoates 14y ago
Are the fraudsters using the charity website itself for confirmation that the card works?
Could you run them off by just always displaying success for any sane-looking small value donation, without leaking the result from your payment processor?
- caf 14y agoThis seems like one of the best options - just makes sure the LUHN checks out and the expiry date is in the future, for any small value donation. Alternately (or in addition to this), you could rate-limit form submissions from the same address.