HN user

gingerlime

3,299 karma

https://gingerlime.com

email: letstalk (at) gingerlime (dot) com

Posts137
Comments1,370
View on HN
www.gingerlime.com 1mo ago

Stripe is friendly to “friendly fraud”

gingerlime
323pts236
www.gingerlime.com 2mo ago

Stripe seems friendly to "friendly fraud"

gingerlime
3pts0
blog.gingerlime.com 3y ago

Reversible Irreversible Deletion

gingerlime
2pts0
blog.google 3y ago

More content by people, for people in Search

gingerlime
255pts303
www.nytimes.com 4y ago

Extra Dose of J. & J. Vaccine Raises Protection, Company Says

gingerlime
1pts0
world.hey.com 4y ago

Rails 7 will have three great answers to JavaScript in 2021+

gingerlime
2pts0
world.hey.com 4y ago

Modern web apps without JavaScript bundling or transpiling

gingerlime
9pts1
www.cjr.org 5y ago

Five competition ministers discuss regulating Big Tech

gingerlime
2pts0
theprivacycollective.eu 5y ago

The privacy collective class action against Salesforce and Oracle

gingerlime
2pts0
www.openrightsgroup.org 5y ago

Parliament must hold the ICO to account

gingerlime
2pts0
blog.gingerlime.com 5y ago

Does iOS14 Protect Your Privacy?

gingerlime
1pts0
blog.gingerlime.com 5y ago

We switched to 4-day weeks

gingerlime
1pts0
blog.gingerlime.com 5y ago

Protecting TimeMachine Backups from Itself

gingerlime
3pts0
www.iccl.ie 5y ago

GDPR watchdog: tracking and consent popups unlawful

gingerlime
98pts64
blog.gingerlime.com 5y ago

Sonos is spying on me (and you)

gingerlime
291pts149
blog.gingerlime.com 5y ago

Why is Backblaze tracking me?

gingerlime
17pts10
www.reuters.com 5y ago

Apple to delay privacy change threatening Facebook, mobile ad market

gingerlime
2pts0
www.bbc.com 5y ago

Apple delays new anti-tracking privacy measures

gingerlime
2pts0
news.ycombinator.com 5y ago

Ask HN: Game-Based Exercise?

gingerlime
1pts1
blog.gingerlime.com 5y ago

Why is Backblaze tracking me?

gingerlime
3pts1
blog.gingerlime.com 5y ago

Disposable emails: I gave Fastmail a second chance

gingerlime
2pts0
blog.gingerlime.com 5y ago

Who’s sharing my data, and who the hell is Dave M. Rogenmoser?

gingerlime
32pts8
photostructure.com 6y ago

PhotoStructure – self-hosted home for all your photos and videos

gingerlime
3pts0
blog.gingerlime.com 6y ago

Hey.com is onto something with its tracking-pixel blocker

gingerlime
30pts32
news.ycombinator.com 6y ago

Ask HN: How to convince my company to avoid dark patterns?

gingerlime
3pts1
github.com 6y ago

Show HN: Lamed – an A/B testing back end using AWS Lambda/API Gateway and Redis

gingerlime
1pts0
blog.gingerlime.com 6y ago

Bunq freeloading: joint accounts now cost 59.9% more, privacy doesn’t matter

gingerlime
2pts0
www.bunq.com 6y ago

Bunq Removes Joint Accounts

gingerlime
3pts0
blog.gingerlime.com 6y ago

Does Apple care about your privacy?

gingerlime
3pts0
news.ycombinator.com 6y ago

Ask HN: Best WFH Mic?

gingerlime
2pts5

Thanks for chiming in. I appreciate it.

That said, I don't think you're really addressing the main point on my post. There is clear evidence here of intentional fraud, yet Stripe does nothing with it.

And from what I gathered previously with my own experience, and supported by comments on this discussion, Stripe win rate for disputing chargebacks is virtually nil. I'd love to be proven wrong here if you can share your actual win/lose rate stats.

Yeah I totally get what you’re saying. It’s true. Still find it frustrating as a tiny merchant because it’s just too easy to get scammed and the system seems skewed against you.

Plenty of companies don't even try to fight it, because then at least you save the $20 chargeback fee.

That’s sad in my opinion. It shouldn’t be the norm. Stripe support encouraged me to file a dispute and submit evidence but next time I prob won’t bother.

I personally find it disappointing that Stripe is in a position to do something about it but prefers the status quo that clearly allows such fraud to continue.

I’d be curious too. Previous experience at a SaaS was that we never won disputes and it was too time consuming on top, so we just ate the dispute fees and refund.

I always thought things are easier with a physical product where you have a 3rd party like DHL that proves delivery was made. But at least in my tiny sample space, that’s not enough to win the dispute.

Yeah I didn’t really go into it, but I can imagine a bank prefers to take care of their own customer than about a small merchant. I’m definitely frustrated with the whole system. But I expected at least Stripe to try to protect its own customers (merchants).

if it was stolen then I guess it’s fairly standard. Disputing specific transactions is much harder though. They ask for evidence you contacted the seller etc and make the process difficult from my very limited experience on the “other end” of the transaction.

It’s sold in 20+ countries around the world, not just Germany.

If you’re talking about premium cigars, using paper is possible but kinda ugly. The glue is similar to what rollers use when rolling cigars in the factory. It works well and fits well with the cigar smoking experience.

You don’t have to buy (my) glue. You can make your own and I even share recipes on the website. Ciglue however offers convenience with the dispenser and integrated brush and glue.

(wasn’t expecting to get into details about my product on HN but love how diverse the community is)

none of the technical measures you mentioned could work with “friendly fraud”. It was a real human with a real card with a real address with details all matching, then disputing a payment they themselves made for a product they received.

Yes most of the communication felt rather LLM assisted or generated. Though to be fair Stripe from my experience always had emphatic support and well written responses. In a way they probably set the gold standard that AI support now mimics.

None of the technical measures you mentioned are relevant with “friendly fraud”. And that’s exactly the problem that Stripe doesn’t solve. And doesn’t want to help merchants fight against.

100% agree. They cannot reverse the dispute. I already lost the money. I understand.

But Stripe is exactly in a position to at least use the evidence I provided (in this case, the evidence included the customer clearly admitting to friendly fraud), and feed it into their fraud-prevention system in some way. This way, lots of signals can help protect merchants from friendly fraudsters. So yes, I see it as a pretty small and legit ask from Stripe.

What do they feed into their Radar machine learning system? surely there are lots of signals to use here. I'm not saying take only my word and ban this customer forever.

But they have my record as a merchant (successful charges, chargebacks, disputes etc), they have the payer record as a consumer (payments, chargebacks etc), when a merchant submits a dispute, they provide evidence. I provided evidence from DHL that the product was delivered.

No single piece of data is enough on its own, but Stripe is in a perfect position to use all those pieces to be able to better detect fraud.

Yet they explicitly do not use this data at all.

Yeah, though this rule sounds a bit tricky. Like what if someone legitimately had their card abused.

The thing that gets me is that Stripe boasts about their machine learning radar rules etc etc, but somehow can't feed it actually valuable data.

Stripe support saw the emails from the customer boasting about defrauding me, they completely agreed that this is a clear case of friendly-fraud, but did nothing with this info.

Happy to share their responses verbatim. It was a rather long back-n-forth. Here's a snippet from the latest email, which I think makes it clear that they do not use the evidence I provided:

    I can assure you that I will take note of your feedback and pass it to our team. Your point about post-transaction abuse detection is valid - while Stripe has robust network-level fraud detection, there does appear to be a gap in utilizing merchant-provided evidence of confirmed fraud to protect the broader merchant ecosystem. This type of feedback from merchants who have direct evidence is valuable for improving these systems.

No. I would have been far more upset about a vague response. I was still upset that they don't do anything about it.

(it took a bit of back-n-forth to get a clear answer, but I did get a clear one. Their support is still excellent from my experience and communicate well)

Yes. But Stripe didn't do anything to prevent the next merchant from falling into the same trap. They had all the evidence, and ignored it.

That was the point I tried to make with my blog post. And yes, if it was too easy for merchants to block consumers, that won't be fair either. But surely there's a middle ground here.

Stripe very explicitly told me that they don't do anything with such reports. It's simply ignored.

    Price updates

    Free API calls: Effective May 1, we’re making API calls free for all B2 Cloud Storage customers.* This removes transaction costs and makes it easier to build, scale, and run high-volume workloads subject to our standard platform usage rules and Terms of Service.

    Storage price: Also effective May 1, we are updating pricing from $6/TB to $6.95/TB.