←back to thread

693 points hienyimba | 4 comments | | HN request time: 0.643s | source
Show context
pc ◴[] No.28523805[source]
(Stripe cofounder.)

Ugh, apologies. Something very clearly went wrong here and we’re already investigating.

Zooming out, a few broader comments:

* Unlike most services, Stripe can easily lose very large amounts of money on individual accounts, and thousands of people try to do so every day. We are de facto running a big bug bounty/incentive program for evading our fraudulent user detection systems.

* Errors like these happen, which we hate, and we take every single false rejection that we discover seriously, knowing that there’s another founder at the other end of the line. We try to make it easy to get in touch with the humans at Stripe, me included, to maximize the number that we discover and the speed with which we get to remedy them.

* When these mistaken rejections happen, it’s usually because the business (inadvertently) clusters strongly with behavior that fraudulent users tend to engage in. Seeking to cloak spending and using virtual cards to mask activity is a common fraudulent pattern. Of course, there are very legitimate reasons to want to do this too (as this case demonstrates).

* We actually have an ongoing project to reduce the occurrence of these mistaken rejections by 90% by the end of this year. I think we’ll succeed at it. (They’re already down 50% since earlier this year.)

replies(25): >>28524033 #>>28524044 #>>28524048 #>>28524050 #>>28524154 #>>28524171 #>>28524182 #>>28524398 #>>28524413 #>>28524431 #>>28524441 #>>28524749 #>>28525580 #>>28525617 #>>28525758 #>>28526933 #>>28527035 #>>28527043 #>>28527233 #>>28527269 #>>28527682 #>>28528656 #>>28529788 #>>28530370 #>>28537774 #
buf ◴[] No.28524033[source]
This post reminds me of when the same thing happened to me about 5 weeks ago: https://news.ycombinator.com/item?id=28085706

It feels like there should just be a better process. Shut down payments to protect yourselves sure, but spare a real life person to email the customer and give them a chance to explain or at least understand why.

replies(1): >>28524155 #
GiorgioG ◴[] No.28524155[source]
It seems like companies can't seem to get their act together to offer some kind of rapid escalation/remediation service. Maybe it's time for legislation to force their hand. This could potentially cost a business a ton of money (and affect a non-trivial number of employees) in the process.
replies(1): >>28526277 #
1. mgkimsal ◴[] No.28526277[source]
Would 'paid' support help? Like pay, say... $150 up front, which is refunded (partial or all) depending on the outcome (error on their end, you get refunded?)

It runs the risk of turning 'support' in to a profit center, I support.

replies(2): >>28526520 #>>28526727 #
2. aquark ◴[] No.28526520[source]
While not ideal, I think this is a great option.

Microsoft (used to?) offer this for developer support and I remember using it maybe 15 years ago where it was a couple of hundred bucks to open a ticket but you got quick access to a real expert and good escalation.

If the issue turned out to be their problem the ticket was refunded.

For something business critical like this it is a way of signaling to the company that there is clearly somethin wrong with the automated process: a real scammer won't pony up hundreds of $ to get a review they would fail.

replies(1): >>28537978 #
3. GiorgioG ◴[] No.28526727[source]
Not really. This should be an emergeny-use only type support. But don't penalize (by making them pay) for a screwup on your end.
4. mgkimsal ◴[] No.28537978[source]
Exactly re: who won't pay. If I'm losing hundreds or thousands, I'll pay $150 just to get a real person's attention - most scammers won't. And yeah, it was MS I was initially thinking of, but haven't been in that world for a long time, so no idea if it's still an option.