5 ms·
I run a saas and we get this every now and then. As a rule of thumb, when you get a chargeback you need to completely ban the customer from your db. This inclu
by shash7 4mo ago
I run a saas and we get this every now and then.
As a rule of thumb, when you get a chargeback you need to completely ban the customer from your db.
This includes:
- card ban
- email address ban
- fingerprint their access and ban
This will save you a lot of hassle when they try to signup/buy your product again and cause you the same amount of grief.
- epa 4mo agoExploiters easily get around this. its a small group of people doing all of the abuse.
- wahnfrieden 4mo agoUse DeviceCheck if iOS app too. Uber does this to ban across accounts
- Cider9986 4mo agoI imagine most fraudsters wouldn't be using iOS. I'm curious if the android app fingerprinting solutions go cross user profile.
- ACCount37 4mo agoAs far as I know, DRM systems like Widewine have IDs that cross user profile lines.
- lxgr 4mo agoGreat, another thing to worry about when buying a used phone: Did any of the previous owners get banned by any of the apps I intend to use on it?
- joshstrange 4mo agoThat's an interesting idea. The sad thing is, the money lost through chargebacks is minimal for me in the grand scheme of things but it makes me irate enough to potentially spend the development time (that will never have a positive ROI) on adding in something like this just to stick it to the scammers.
- wahnfrieden 4mo agoIt is at least very simple to implement. It's a simple API. Useful capability for banning abusive users too if you have social elements or other abuse vectors besides payment.
- shawnz 4mo agoYou'd better be promptly responsive to legitimate customer support inquiries if you are going to have a policy like that
- joshstrange 4mo agoThis comment struck a nerve with me and perhaps you didn't mean it in this way but: Yes, many of us are incredibly responsive to customer support inquiries (I have a <1hr response time unless you send in a ticket when I'm sleeping) and it doesn't matter. Fraudsters gonna fraud. This isn't a case of "they asked for a refund, we refused, they issued a chargeback", it's a case of a scammer being a POS. I've dealt with my fair share of chargebacks and in every case I've seen it's someone being a jerk and never a legit case. The fact that Stripe won't help you, the banks don't care about all the evidence you have, and you end up out the money for the product _and_ you get hit with a chargeback fee on top of it is madness. I could literally have video of the person holding up their ID saying "I XXXXX agree to pay YYYY" and banks would still side with a the scummy scammers. I have, quite literally, never had someone reach out via support and then file a chargeback later. They do it without reaching out, probably because they are a trash person and they have no interest in getting anything fixed and are just scammers.
- shawnz 4mo agoYeah, I know chargebacks are a frequent vector for abuse and of course I don't mean to imply that customers doing chargebacks ought to always implicitly be given the benefit of the doubt. Given that you are responsive to inquiries, it makes sense that you'd rarely if ever have a legitimate chargeback -- because there's no reason for a customer to resort to chargebacks if the vendor is willing to work with them to resolve legitimate issues. But I know of many examples of people needing to resort to chargebacks due to ineffectual customer support, and then having their accounts banned and being cut off from other unrelated services from the same vendor as a result. I don't think that's an appropriate response and vendors should be careful not to let that happen if they instate such a policy.
- Cider9986 4mo agoAll 3 of those identifiers can be easily changed by advanced users. I'm curious what you mean by fingerprint their access. Is this like an on demand fingerprinting, I've only seen browser fingerprinting as a tracker for every user.
- imp0cat 4mo agoNice try, chargebacker! ;)
- Cider9986 4mo agoI try to pay with Monero, so I can't chargeback :)
- UqWBcuFx6NV4r 4mo agoif i had a dollar for every time a developer “perfect is the enemy of good”’d me
- super256 4mo agoJust force 3d secure, as it shifts the liability to the customer's bank. Most people don't mind opening their banking app on the phone for confirming the transaction if they really want the product for itseprice.
- gingerlime 4mo agoif customer fraudulently claims to their bank that they haven’t received the product, the bank files a chargeback and 3DS does not protect the merchant against it.
- anticensor 4mo agomost banks refuse chargebacks from 3ds transactions
- gingerlime 4mo agoeven if the customer claims the product never arrived?
- anticensor 4mo agoyes some do even in those cases
- checkmight 4mo agoNot True Non fraud reasons ( NR or Credit not processed) can be filed 3DS adds no friction