←back to thread

1134 points mtlynch | 2 comments | | HN request time: 1.52s | source
Show context
khiner ◴[] No.22941160[source]
I used to work for a company that transferred a huge amount of money from tenants to landlords. Fraud is a really big deal in that domain, and we were really excited to update our credit card entry forms to use the newer Stripe Elements forms that include this user behavior tracking, to feed into Stripe radar and in turn use Radar’s api to feed the fraud likelihood data in to our own fraud detection platform. This agent behavior tracking is proudly highlighted in Stripe’s documentation as the feature that it is - they’re not being sneaky about this in any way and this feature is incredibly useful to help companies stop fraudsters from doing serious financial harm. In other words, this is not news. If you could somehow prove that Stripe is selling this data, THAT would be a huge story. But as far as we know their explicit claims that they do not is true. Thanks for your awesome anti-fraud features, Stripe - they helped us help people to pay and accept rent safely.
replies(1): >>22944384 #
curiousgal ◴[] No.22944384[source]
Honest question, what exactly do people mean by fraud? How could someone exploit a payment page?
replies(1): >>22944427 #
1. amelius ◴[] No.22944427[source]
Also, how would fraud detection work in Europe, where there is the GDPR?
replies(1): >>22947431 #
2. carstenhag ◴[] No.22947431[source]
The GDPR doesn't say "You can't do anything", the tldr of it rather is "the user must be informed and/or you must have their opt-in, then it's allowed"