WingNews logo WingNews
top | item 37396731

Ask HN: Looking for an Alternative to Stripe

29 points| fuckgoogleplay | 2 years ago

Hi.

We're using Stripe and we got hit by a bunch of friendly fraud where we see an easy solution how to prevent this from happening - blocking a specific bank. But Stripe does not give you the BIN of the cards, and will not allow you to block by card issuer name.

BIN databases cost like $2.500 per year and I'm not sure how accurate they are. Why on Earth Stripe wouldn't let us see the BINs/block by issuer names is beyond me.

So I'm looking for an alternative that:

1) Supports 3DS

2) Lets you block by issuer name

3) Shows you the BIN (not really needed if #2 is available, but nice to have an shows that the processor cares about the merchant)

Is there a good option? Thanks

18 comments

order

edwinwee|2 years ago

You can block by issuer / BIN with Stripe Radar: https://stripe.com/docs/radar/lists#default-lists.

You can also request to receive BIN per transaction if you write into support (https://support.stripe.com/contact/login). This isn't allowed by default because Stripe needs to make sure the setup and use case is secure to ensure PCI compliance.

BehindTheMath|2 years ago

The BIN is not covered by PCI. There's no reason they can't provide the BIN for every card.

fuckgoogleplay|2 years ago

Stripe support specifically told us they don't provide BINs and they don't make exceptions.

william-evans|2 years ago

We use Checkout.com and find them really helpful.

Their Risk system allows you to block by BIN, which we do, and they provide you full details of the payment details associated with each authorisation.

fuckgoogleplay|2 years ago

Thanks, will try that. Is there an option of blocking by the name of the issuing bank? The bank that I'm trying to block has a lot of BINs that change constantly.

gomezjdaniel|2 years ago

Why don't you check the BIN yourself before sending the request to Stripe?

I can assist you with that: danielgomjur/at/gmail/dot/com

fuckgoogleplay|2 years ago

Cause I redirect the customer to Stripe hosted page. I'd really prefer not to go into the whole PCI DSS thing for this. Also, why should I jump through hoops when it's Stripe that chooses to make life harder for me? I'd rather find a better alternative.

ratg13|2 years ago

It would be illegal to do this in the US or Europe without the business being PCI compliant first.

You might want to offer up the country's laws you are familiar with before making offers like this.

eihsan94|2 years ago

Can I know did you find any solution from this?

thedangler|2 years ago

What country are you in? I can help you get an account that works in Canada,USA, and some other countries.

fuckgoogleplay|2 years ago

USA. What do you mean by "get an account"?