News for hackers. Stuff that matters.
Re:Why are payment forms so complicated? by seany on Thursday March 07, 2013 @04:26PM (#5340382)
Neweggs policies on card related issues are insane imho. I've actually had my account banned because my wife used my CC to buy something on her newegg account once. The next time I went to make a purchase my account was banned because the CC i wanted to use was listed in another account. It's worth noting that they didn't have any problems processing `her` order which is where you would want that kind of action to actually happen!
Re:Why are payment forms so complicated? by akcreek on Thursday March 07, 2013 @09:15PM (#5341748)
I run an ecommerce site and we sell about 50% in the US and 50% overseas and have a lot of fraud attempts pretty much daily (more outside of the US, but plenty in the US). A couple months ago I built some simple checks that dramatically reduced our handling time of fraud cases. The checks include:

1. Has the credit card been used by any other account holder? 2. Has the shipping address been used by any other account holder? 3. Has the phone number been used by any other account holder? 4. Has the billing address been used by any other account holder?

If any of those are true a warning or info notice is shown depending on the situation. For example, if the shipping address is used by multiple accounts an info notice is shown as there are plenty of times the same address would be used by multiple accounts (freight forwarder, sending parts to a repair shop, etc...). It reminds the order processor to check it out and verify the order is legit.

If the billing, credit card or phone number match it throws a warning as that is far less likely to happen legitimately - which is what you experienced. We don't automatically decline like Newegg did to you, but we do investigate the order thoroughly and if we aren't comfortable with it we will decline or require funds be sent via a verified papal account or wire transfer.

We use a lot of other methods for checking fraud; IP, AVS, etc... but these really simple checks have been really helpful because we get hit by the same people over and over again. They try the same card with multiple accounts or use the same shipping address on multiple accounts, etc...

If an order has been marked as fraud and any of those checks above hit then the new order is automatically marked as fraud too.

Re:Why are payment forms so complicated? by seany on Saturday March 09, 2013 @01:30PM (#5349142)
I actually would have no problem with them just telling me "hey you can't use this card because it's in another account." It was the severity of the action that was the most frustrating part. I'm still not sure why when the card was in my account to start with it let my wifes purchase go through, that just doesn't make any sense at all to me.
Re:Why are payment forms so complicated? by tuxidomasx on Friday March 08, 2013 @06:03AM (#5342846)
Would you use an api service that aggregated addresses and could tell you if a given address was known to be associated with fraud? And that let you add addresses to the 'blacklist'.
Re:Why are payment forms so complicated? by akcreek on Friday March 08, 2013 @01:47PM (#5344985)
I would certainly look at it with much interest. Being able to add an address to the list would be fantastic as well since small retailers like us can't combat fraud alone very efficiently.
Re:Why are payment forms so complicated? by trafficlight on Thursday March 07, 2013 @04:31PM (#5340410)
I've never had this problem. I've used the same CC on multiple accounts for the past few years.