News for hackers. Stuff that matters.
Re:Credit-card firms are becoming reluctant regulators of th... by Isinlor on Monday October 11, 2021 @03:14AM (#28825657)
I would want to see regulations where banks are explicitly forbidden from blocking legal transactions.

If it's legal then banks should have no choice but to handle it.

Re:Credit-card firms are becoming reluctant regulators of th... by AnthonyMouse on Monday October 11, 2021 @03:43AM (#28825830)
The biggest problem with this is that we already have regulations than punish banks for processing illegal transactions.

If you don't want that, and you want the banks not to refuse any legal transactions, that's easy. They then don't refuse to process any transactions at all.

If you do want them to refuse illegal transactions, and they're allowed to refuse legal transactions, that makes it easy for the bank because then they just refuse anything marginal even if it's totally legitimate. This is what we have now. It's not a problem for the bank but it's a big problem for the people getting unjustly locked out.

Expecting the bank to process no illegal transactions and all legal transactions is an impossible burden, because nobody actually knows what that means. The meaning of a lot of laws isn't even settled until they get litigated in court and set a precedent. It would require the bank to be infallible, and know everything about everybody's business, because a mistake in either direction would incur penalties.

So which one do you want? (The first one actually looks pretty good when you consider the alternatives. Let the police be the police and the bank be the bank.)

Re:Credit-card firms are becoming reluctant regulators of th... by sverhagen on Monday October 11, 2021 @03:49AM (#28825863)
Isn't that a false choice, that's only phrased to cater to the "that makes it easy for the bank"? They are now categorically refusing certain businesses. If those businesses could at least appeal and demonstrate that they are within the law, why wouldn't banks be mandated to process the transactions? This could go with some sort of safe haven for the banks, that if they did this review process that they won't be liable if an illegal transaction slips through. (And sure, some illegal transactions would slip through, but I'm convinced that this is already the case.)
Re:Credit-card firms are becoming reluctant regulators of th... by AnthonyMouse on Monday October 11, 2021 @04:17AM (#28826013)
Challenging it in court is an impossible burden for most people, so the most important thing is the default. Do we want the bank to assume you're a criminal, or do we want to assume you're innocent and make the police be the ones to prove if you're not?
Re:Credit-card firms are becoming reluctant regulators of th... by toyg on Monday October 11, 2021 @05:15AM (#28826355)
The DMCA, with all its faults, outlines a challenge process performed largely outside the courts. Something similar could be done for banks: bank shuts down account for company, company appeals providing some proof, bank files proof somewhere and reinstates. If the bank is then sued by government or third party, it is "safe-havened" by such proof. If proof is found to be false, the company is responsible, not the bank.
Re:Credit-card firms are becoming reluctant regulators of th... by Isinlor on Monday October 11, 2021 @06:41AM (#28826808)
Yes, that's sounds like a very reasonable system. I like that it shift burden of law enforcement from banks onto actual law enforcement system with proper checks and balances.
Re:Credit-card firms are becoming reluctant regulators of th... by JumpCrisscross on Monday October 11, 2021 @11:37AM (#28829538)
> Something similar could be done for banks: bank shuts down account for company, company appeals providing some proof, bank files proof somewhere and reinstates

You're describing your state banking regulator. Also, like a bajillion federal banking regulators.

Re:Credit-card firms are becoming reluctant regulators of th... by toyg on Monday October 11, 2021 @11:41AM (#28829581)
Well then, something clearly is not working in that process, if we're here.
Re:Credit-card firms are becoming reluctant regulators of th... by JumpCrisscross on Monday October 11, 2021 @11:44AM (#28829615)
> something clearly is not working in that process, if we're here

The article talks about credit card networks. I'm referring to banks. Banks are highly regulated, including with respect to account closures. Credit card networks are much less regulated.

If you want a non-court public venue to dispute your bank on something, anything, you have several such venues. Depending on your state, they can be quite toothsome.

Re:Credit-card firms are becoming reluctant regulators of th... by pjc50 on Monday October 11, 2021 @04:16AM (#28826009)
Possibly, but those businesses tend to be the ones that lack political cover and that a large section of the public and political sphere would happily ban anyway.
Re:Credit-card firms are becoming reluctant regulators of th... by exporectomy on Monday October 11, 2021 @04:34AM (#28826103)
Parent's point seems like what they're doing here. Trading underage porn is illegal, as well as revenge porn in some places, etc. so they forbid that and allow legal porn. Seems like they really are doing "all legal things and no illegal things" more accurately, and it really is burdensome to everyone.
Re:Credit-card firms are becoming reluctant regulators of th... by TeMPOraL on Monday October 11, 2021 @05:05AM (#28826285)
> Seems like they really are doing "all legal things and no illegal things" more accurately

Well, they're doing that but there's also a huge set of things whose legal status is "shmaybe?", and AnthonyMouse's point is that this is where the defaults matter. Currently, banks tend to merge that third category into "illegal" set. They could merge it into "legal" set instead, which would arguably be better for society.

Re:Credit-card firms are becoming reluctant regulators of th... by rich_sasha on Monday October 11, 2021 @04:38AM (#28826134)
I guess the question is whether the business they serve is legal. YouTube has some pirated content for sure. The business has rules in place to deal with it, for better or worse, and if someone pays with a credit card to watch something illegal in YT, that doesn’t count as the bank facilitating a crime.

I’m not defending porn as a grand corner of free speech but I don’t like banks deciding who can and cannot be paid.

Re:Credit-card firms are becoming reluctant regulators of th... by Kalium on Monday October 11, 2021 @09:35AM (#28828135)
The counterpoint that a banker would make is that they're forced into this position by Congress, regulators, and prudence.

The alternative that might work is charging businesses fees that vary according to the risk of their transactions being illegal. Which sounds good on paper, but also runs the risk of leaving the bank in the position of making a large amount of fees from illegal activity, which rarely goes over well in court. Better, perhaps, to have a unified fee schedule and just refuse any business that could be unprofitable from liability.

I think the banker would have a strong point here. They're not in a place where these are always easy calls to make - transactions don't come with an evil bit. The constraints placed on them don't leave them a lot of viable choices.

Re:Credit-card firms are becoming reluctant regulators of th... by Mindwipe on Monday October 11, 2021 @11:08AM (#28829177)
Mastercard's BRAM rules involve blocking quite a lot of things that are legal though - you're not allowed to mention hypnosis, or blood, or vampires in adult content, even in a completely fictional context.
Re:Credit-card firms are becoming reluctant regulators of th... by jimbob45 on Monday October 11, 2021 @11:29AM (#28829451)
Do you have a link for that? I'm having a frustratingly difficult time trying to find a concise list of the BRAM rules.
Re:Credit-card firms are becoming reluctant regulators of th... by Mindwipe on Monday October 11, 2021 @11:32AM (#28829485)
Not a public one I can hand out, no. The lack of public transparency around the BRAM rules is also a significant issue imo.
Re:Credit-card firms are becoming reluctant regulators of th... by Isinlor on Monday October 11, 2021 @06:23AM (#28826724)
It should not be so much whether it is legal or illegal in the strict sense. The question is whether bank has sufficient evidence to suspect that illegal activity is taking place.

So bank should be held liable if they:

- do not collect evidence

- do not act on evidence

- if they act without evidence

The bank should face appropriate penalties for making misjudgments in both directions. For example, you should have a right to sue bank for refusing to provide a service. The court could judge whether bank had sufficient grounds to refuse to conduct the business with you.

The bank should also provide the evidence to law enforcement to trigger investigation into alleged illegal misconduct. If the judicial systems clears you, then again, you should be able to compel bank to provide the basic financial services.

There is regulation like that for individuals in EU. Banks are obliged by the law to provide basic financial services (bank account and identification services if I recall correctly) to EU residents as part of the European Single Market.

Re:Credit-card firms are becoming reluctant regulators of th... by londons_explore on Monday October 11, 2021 @10:19AM (#28828602)
> Banks are obliged by the law to provide basic financial services (bank account and identification services if I recall correctly) to EU residents as part of the European Single Market

While offering a "Basic bank account" is a legal requirement, they have no requirement to offer that service to any specific person. In reality, it typically means that they're offered to people in debt, but not to people the bank doesn't like, american citizens, prisoners, etc.

Re:Credit-card firms are becoming reluctant regulators of th... by Isinlor on Tuesday October 12, 2021 @04:35AM (#28837419)
They do have a requirement to offer basic payment account to all legal EU residents. Even to people who have no legal right to reside in EU, but whose expulsion is impossible.

From DIRECTIVE 2014/92/EU CHAPTER IV, Article 16:

2. Member States shall ensure that consumers legally resident in the Union, including consumers with no fixed address and asylum seekers, and consumers who are not granted a residence permit but whose expulsion is impossible for legal or factual reasons, have the right to open and use a payment account with basic features with credit institutions located in their territory. Such a right shall apply irrespective of the consumer’s place of residence.

Member States may, in full respect of the fundamental freedoms guaranteed by the Treaties, require consumers who wish to open a payment account with basic features in their territory to show a genuine interest in doing so.

Member States shall ensure that the exercise of the right is not made too difficult or burdensome for the consumer.

From: https://europa.eu/youreurope/citizens/consumers/financial-pr...

If you are legally resident in an EU country you are entitled to open a "basic payment account".

When banks can refuse you a basic payment account

You can be refused an account if you do not comply with EU rules on money laundering and terrorist financing.

In some EU countries, you may be refused a basic bank account if you already have a similar account with another bank in the same country.

If you're applying for a basic payment account outside the country where you live, banks in some EU countries may also want you to prove a genuine interest for doing so – for example if you live in one country but work in another.

Re:Credit-card firms are becoming reluctant regulators of th... by rich_sasha on Monday October 11, 2021 @04:35AM (#28826113)
There is a third way. Financial institutions cannot facilitate money laundering (well...). But they can’t just let that hang. You do due diligence, you’re either happy that the business looks legit enough, or you have doubts . In the latter case you inform authorities, and they sort the question. Either you get the go ahead or you’re dealing with a criminal, and the state takes it out of your hands.

You can imagine a similar model for payments. The bank can’t just indefinitely say “umm not sure”, it has to go one way or the other.

Re:Credit-card firms are becoming reluctant regulators of th... by londons_explore on Monday October 11, 2021 @10:16AM (#28828563)
> a mistake in either direction would incur penalties.

It seems reasonable to just make the fines small, and the bank can try to minimize them by having their policies match what a court will find for those which are taken to court.

Re:Credit-card firms are becoming reluctant regulators of th... by 0xy on Monday October 11, 2021 @03:45AM (#28825846)
It's a very difficult task to determine if a transaction is legal or not, sometimes impossible. Regulations differ not only on the country and state level, but sometimes the city level.

For example, can you buy alcohol in Delaware? Well, not if it's Sunday. How about a weekday? Not if it's between 1am and 9am.

Can you buy alcohol in New Jersey on Sunday? Sure, well not if you're in Bergen County.

That's one product. How do you propose these companies codify the entire world's regulations? It would require thousands of people to maintain the rule engine.

Re:Credit-card firms are becoming reluctant regulators of th... by sverhagen on Monday October 11, 2021 @03:51AM (#28825871)
So, are you suggesting that credit card firms no longer process liquor transactions? I think it's understood that there are nuanced difficulties, but does that mean they should categorically shut out entire industries? (I feel like for liquor we generally fall on the side of "no".)
Re:Credit-card firms are becoming reluctant regulators of th... by rich_sasha on Monday October 11, 2021 @04:39AM (#28826148)
The bar should be, is this business legally allowed to conduct business, not finer grained. It’s on the business not not break local laws.
Re:Credit-card firms are becoming reluctant regulators of th... by ClumsyPilot on Monday October 11, 2021 @06:50AM (#28826874)
"For example, can you buy alcohol in Delaware?"

Next, TESLA eula will forbid you from going to questionable establishments, and the car will shut off if you arwle going to a strip club.

USSR couldn't dream of this level of surveillance, turns out the trick was to privatise it.

Re:Credit-card firms are becoming reluctant regulators of th... by A4ET8a8uTh0 on Monday October 11, 2021 @11:31AM (#28829474)
"I am sorry Dave, I am afraid I can't let you do that"

Only it won't be delivered by AI, but by a compliance script tied to geo-blocked locations. It will get extra tricky for cars to navigate when their owners are child molesters and have to stay 10 miles away from houses with children in it.

Onwards to our glorious future!

Re:Credit-card firms are becoming reluctant regulators of th... by nobody9999 on Monday October 11, 2021 @01:36PM (#28830794)
>If it's legal then banks should have no choice but to handle it.

Right. But banks are regulated by the US Federal government. And according to US federal law[0], possessing and selling cannabis is just as illegal as possessing and selling methamphetamine or heroin.

As such, unless and until that changes, the banks aren't going to involve themselves in what the US Federal government deems a felony, regardless of what the several states do.

[0] https://en.wikipedia.org/wiki/Controlled_Substances_Act

Re:Credit-card firms are becoming reluctant regulators of th... by dotancohen on Monday October 11, 2021 @05:30AM (#28826430)
I believe that the concept is called Common Carrier in other fields and legislation is very well established and developed.
Re:Credit-card firms are becoming reluctant regulators of th... by i21QMgplhRJs2OL on Monday October 11, 2021 @09:37AM (#28828151)
Re:Credit-card firms are becoming reluctant regulators of th... by Kalium on Monday October 11, 2021 @09:28AM (#28828080)
From the way you frame this, you seem to think legal or illegal is an easy thing for a bank to evaluate quickly and accurately. Is that a correct statement of your position?
Re:Credit-card firms are becoming reluctant regulators of th... by HWR_14 on Monday October 11, 2021 @12:05PM (#28829838)
The issue there is when it comes to likely fraudulent transactions. Like, a bank shouldn't have to give you 10MM in US currency because you hand them a "totally real check from Bill Gates" that looks like it was printed off a laserjet printer. But, they do make laserjet printed checks and maybe Gates uses them for the lulz.

All transactions have some likelihood of fraud, so it's a fuzzy line.

Re:Credit-card firms are becoming reluctant regulators of th... by makeitdouble on Monday October 11, 2021 @04:18AM (#28826016)
We would need at least _one_ chain of bank - payment processor that only works on payment fees and has a public mandate of letting the maximum transactions go through.

Basically a pubic service PSP with loss financed by govs. I'm not holding my breath, and I can't see a single action I could take that would bring us even a millimeter closer to this goal. It's depressing.

Re:Credit-card firms are becoming reluctant regulators of th... by Imnimo on Monday October 11, 2021 @11:00AM (#28829064)
What would be the impact on consumer protections like chargebacks if banks were forced to process transactions they deemed to have a high risk of fraud?
Re:Credit-card firms are becoming reluctant regulators of th... by makeitdouble on Monday October 11, 2021 @04:17AM (#28826012)
We would need at least _one_ chain of bank - payment processor that only works on payment fees and has a public mandate of letting the maximum transactions go through.

Basically a pubic service PSP with loss financed by govs. I'm not holding my breath, and I can't imagine what could realistically be done at our level to be even an inch closer to that ideal. It's depressing.

Re:Credit-card firms are becoming reluctant regulators of th... by croes on Monday October 11, 2021 @04:15AM (#28826001)
The banks of the power and lobbyists to make certain things illegal.
Re:Credit-card firms are becoming reluctant regulators of th... by ars on Monday October 11, 2021 @12:02PM (#28829807)
> I would want to see regulations where banks are explicitly forbidden from blocking legal transactions.

I want the same thing from web service providers - if the content is legal then Amazon, etc. should not be permitted to refuse service.

Twitter should not be permitted to have its own terms and conditions, rather they should follow the law - it's either illegal, and ban the person, or it's legal and they must leave it up.

Maybe put a limit like: If your number of registered users is at least 5% of the US adult population, then a new set of rules kicks in.

There are some details I don't have answers for: What if someone posts things that are legal, but offtopic for the location? I don't want to prevent moderators from removing that kind of thing, but I also don't want them using it as a false reason.

I'm sure there are other edge cases I have not thought of.

Re:Credit-card firms are becoming reluctant regulators of th... by colejohnson66 on Monday October 11, 2021 @06:03PM (#28833610)
That literally flies in the face of the first amendment. Forcing a website to host something they don’t like is compelled speech. They’re private corporations and can do what they want. The courts are very clear on that. If you want them to be forced to host everyone, you nationalize them into a utility.
Re:Credit-card firms are becoming reluctant regulators of th... by ars on Monday October 11, 2021 @09:44PM (#28835130)
That's what a common carrier is. It's not such a stretch to apply that to general purpose hosts.

And if what you say is right, how can the parent propose requiring banks to process any legal transaction?