top | item 43137050

(no title)

everly | 1 year ago

If you introduce a process susceptible to credit card fraud then you're not keeping it low stakes.

discuss

order

stevoski|1 year ago

I see.

I was commenting on the reality of his current site. He has a purchase form, where you purchase for $5, connected to Stripe.

In more detail:

A bad actor with a large quantity of stolen credit card info who finds this site (and eventually, someone always does) will use it to test whether each card works. Small-dollar-amount payment forms accessible without going through a sign-up-and-verify process attract these bad actors.

The point I was trying to make is that this won’t be the low-hassle, easy-to-run product that OP wants it to be.

Which sucks. It really does. The bad actors ruin this stuff.

(I write from the experience of running a pay-once B2C desktop app for 10 years and a B2B SaaS for 8 years.)

karamanolev|1 year ago

> test stolen credit card numbers

The stakes don't matter if you're testing credit card number. Just that the service tells you if it works or not. And low amounts are good, since you're not wasting the card's limit.