Most active commenters

    ←back to thread

    Ground control to Major Trial

    (virtualize.sh)
    474 points plam503711 | 13 comments | 16 May 25 12:03 UTC | HN request time: 1.308s | source | bottom
    1. matt-p ◴[16 May 25 12:16 UTC] No.44004502[source]▶
    I think the most depressing thing is how unsurprising this is.

    This is why free trials require credit cards upfront, as they're more difficult to fake, not because you're about to be stealth billed. It's thanks to people like this.

    replies(1): >>44004576 #
    2. rocketvole ◴[16 May 25 12:24 UTC] No.44004576[source]▶
    it's practically trivial to bypass this if you really want to. CapitalOne in the US allows you to have virtual cards that can be verified but you can delete and block at any time for free if you have a credit card from them. I'm sure the practice discourages casuals from gaming trials, but it just feels like it's making life miserable for paying customers but doing almost nothing to stop bad actors
    replies(4): >>44004597 #>>44005098 #>>44005532 #>>44009106 #
    3. sumanthvepa ◴[16 May 25 12:26 UTC] No.44004597[source]▶
    Those types of card numbers are detectable though.
    replies(2): >>44004725 #>>44004758 #
    4. hiatus ◴[16 May 25 12:39 UTC] No.44004725{3}[source]▶
    How? Based on issuer identification number?
    replies(2): >>44004816 #>>44005043 #
    5. idiotsecant ◴[16 May 25 12:42 UTC] No.44004758{3}[source]▶
    They are detectable only if the issuer has a dedicated BIN for virtual cards. If they issue in the same BIN as your regular card, there's no way to detect without issuer cooperation, which would defeat the point.
    6. c12 ◴[16 May 25 12:47 UTC] No.44004816{4}[source]▶
    I'm pretty sure it can be done via the IIN. Services like https://binlist.net/ provide a convenient solution to identify if it's a prepaid card.
    replies(1): >>44004889 #
    7. ◴[16 May 25 12:55 UTC] No.44004889{5}[source]▶
    8. mrbluecoat ◴[16 May 25 13:09 UTC] No.44005043{4}[source]▶
    As one example, Oracle Cloud's Free Tier sign-up prevents any type of virtual card.
    replies(1): >>44007914 #
    9. matt-p ◴[16 May 25 13:13 UTC] No.44005098[source]▶
    If you also ban virtual and pre-paid cards it cuts this to almost zero.

    There is a difference, this rocket company is not really going to generate a new virtual card every time? You think their business bank account even supports that?

    replies(1): >>44008728 #
    10. TechDebtDevin ◴[16 May 25 13:51 UTC] No.44005532[source]▶
    privacy.com
    11. walterbell ◴[16 May 25 17:28 UTC] No.44007914{5}[source]▶
    Oracle could productize a Trial Filter.. powered by Oracle Lawyers™.
    12. yurishimo ◴[16 May 25 18:55 UTC] No.44008728{3}[source]▶
    Considering it's a startup, high likelihood they are using something like Brex, which does support virtual card numbers.
    13. bsder ◴[16 May 25 19:42 UTC] No.44009106[source]▶
    > CapitalOne in the US allows you to have virtual cards

    Anything recurring will not take a virtual card or gift card in the US.

    I got burned on this a couple times until I figured it out.