All geek questions in one place

Donation Fraud Tips

I work for a nonprofit organization and created an online donation page. This donations page was recently used to check stolen credit card details through a process known as Carding .

How it works is that a loafer gets a whole bunch of credit data, but doesn't know which numbers are good or not. Therefore, they go to the donation page and make a small donation ($ 5 or less) with the stolen card number. If donations pass, they will be able to use them for larger purchases.

Carding can cost a significant non-profit amount of money, since most of these “donations” will end, and in some cases the bank will charge a fee.

Does anyone else have experience with this? Also, what ways can I stop?

+4
source share
1 answer

Off topic, but I will bite:

  • Do not accept "small" donations.
  • Do not accept “many” donations from the same IP address in a “short” period of time.
  • Consider buying credit card fraud insurance.

Which means “small”, “many” and “short” is up to you.

If you do not, consider using PayPal exclusively for credit cards.

Without programming skills, our Donate button is a simple and affordable way to start accepting online donations.

  • Discount rates for status 501 (c) (3)
  • Your donors don't even need a PayPal account.
  • Accept All Major Credit Cards

A source

What they say about fraud protection:

If someone knows about PayPal, then how seriously do we take security. Behind the scenes, we work to help you and your donors be safe from fraud.

Automatic fraud screening

Protect your business from our inexorable screens of fraud, address verification (AVS) and card verification (CVV2) and 128-bit encryption - all included at no extra charge.

PCI & CISP Compliance

PayPal adheres to the international standards PCI (Payment Card Industry) and CISP (Information Security Program) for data protection. These standards are designed to protect your business from fraud and data loss. Since we process payment card information, you don’t need to worry about complying with compliance standards yourself or storing your customers ’confidential financial information.

Disclaimer: I have no connection with PayPal or any credit card company. I do not start or do not have direct experience with an e-commerce site, a non-profit site or any other website that accepts electronic payments. I am not a lawyer. I am just a programmer.

+4
source

Source: https://habr.com/ru/post/1335354/

More articles:


All Articles