#assholeoftheday

[Deleted member 658642]

Fraudulent card testing is going to financially ruin me

Over this past weekend somebody used my business as a means to do credit card testing, meaning they put an insane amount of transactions (of which most failed) through our system in order to validate the authenticity of stolen credit cards.

Unfortunately we were using a service called Stripe Radar, which incurs a fee of 6p (gbp) per transaction to test it for fraud, and because we noticed the card testing too late, 2.2million payments were put through our system which at 6p per transaction equates to roughly £36k, not including fees for all the refunds we had to process. Our Stripe balance is currently sitting at -£40,402.79 and I have absolutely no idea what to do.

Has anybody got any experience in issues like these and the types of recourse I can take with this? There's absolutely no way we'll ever be able to pay back £40k, we're a tiny business.

Will I have to file bankruptcy for the business? How does that affect me personally?

I'm incredibly lost and could use any advice available.

Rant of a small business owner that has been fucked over by low lives.

TLDR : The poster’s (reddit) business was used as a means to verify which of a list of cards work and since each transaction is put through a filter that charges per look up, the OP is now on the verge of filing for bankruptcy.

 

[Nikxon]

I don't understand but why does OP need to pay 40k when didn't do the transaction?

 

[Deleted member 731332]

I truly hope that everything works out in their favor. This is awful.

 

[Deleted member 658642]

I don't understand but why does OP need to pay 40k when didn't do the transaction?

Stripe Radar is used to verify whether a given transaction is fraudulent or not. It charges per look up.
So when the lowlives plug in a card on OP’s site to see if it works, regardless of whether the transaction goes through or not, the guy subscribed to SR gets charged a fee. Multiply that 2.2 million times and the charges add up.

 

[MKSKS]

I don't understand but why does OP need to pay 40k when didn't do the transaction?

OP was using a service that charges x amount to check for fraud.
2.2million payments were put through for testing checks so that means he will have to pay for those.

 

[NirvanaWolf]

2.2 million payments. Jesus. I think he should work it out with stripe. I don't know how stripe is in customer service. But one can always try.

 

[alternatesword]

If the OP doesn't opt for the service, he might just lost the stripe account not this 40k. What a useless service. Also, i'm curious why the stripe not put an hold on inward when multiple transactions identified as fraud.

 

[Dopious]

Stripe Radar is used to verify whether a given transaction is fraudulent or not. It charges per look up.
So when the lowlives plug in a card on OP’s site to see if it works, regardless of whether the transaction goes through or not, the guy subscribed to SR gets charged a fee. Multiply that 2.2 million times and the charges add up.

Hopefully, the business owner can come to a solution together with Stripe, it is not in Stripe´s best interest to enforce those fees in this case.

 

[Nikxon]

OP was using a service that charges x amount to check for fraud.
2.2million payments were put through for testing checks so that means he will have to pay for those.

So he used the service and forgot to stop it well 2.2mil payments that's a lot I hope he manages to get it through.

 

[SocialManager]

That seems like an insane failure on Stripes side not to disable the payments after the first 100,000 or so.

 

[Iuzzu]

This was not a mistake or a Stripe failure
They do this on purpose to make money.
If I were the OP I would simply ignore that and move to another payment processor. Leave the debt collectors talking alone and ignore them.
Stripe is becoming more like PayPal every day

 

[4ry4n]

After 2.2 million transactions, they can't afford 40k, that is very odd.

 

[Panther28]

He says he can't afford it, as it's a small business. Time to turn into a bigger one now, as good an excuse as any! lol

 

[DylanDog666]

Stripe Radar is used to verify whether a given transaction is fraudulent or not. It charges per look up.
So when the lowlives plug in a card on OP’s site to see if it works, regardless of whether the transaction goes through or not, the guy subscribed to SR gets charged a fee. Multiply that 2.2 million times and the charges add up.

Is there any way if you are a small business to limit Max 100 CC transactions or something similar? Are there any protections you can make in order to avoid this?

 

[yogib34r]

Absolutely awful

 

[Monzani]

Stripe is clearly malicious in allowing millions of fraudulent transactions

 

[Rakzs]

I used to run a store which used stripe a while ago, we never had any chargebacks but even after just a few hundred legitimate payments they temporarily locked our account.
So I'm surprised they would allow 2.2 million without doing anything. Seems very weird to me.

 

[Gogol]

It’s sad, but.. shouldn’t he have protected the calls? I guess he could …
1) Hide the payment page behind login (and make it available for email verified users only)
2) Have a proxy call with rate limiting. The proxy would then call stripe if not rate limited.
3) Have recaptcha 3 in the page/call where if the reputation is below a threshold (let’s say, 0.5), it wouldn’t fire the stripe check atall..

To be honest, I have not used the api he talked about, so can’t be 100% sure. But, there has to be a preventative measure for this.

 

[1618887]

If the OP doesn't opt for the service, he might just lost the stripe account not this 40k. What a useless service. Also, i'm curious why the stripe not put an hold on inward when multiple transactions identified as fraud.

Exactly my thoughts, it should have triggered an alert, doesn't give much confidence in their systems

 

[med9]

guys idk what this talking about i saw asshole then i pressed to see