frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Tell HN: Be Careful with Stripe Connect

13•breue•4h ago
TLDR - stripe made it easy for fraudsters to syphon $4,500 through our stripe account and withdraw all of it - and they expect us to cover everything and have offered absolutely zero help.

I’ve been building on top of stripe for 15 years and have made about 70 products for clients using stripe.

I just had an incident with a project where fraudsters were able to route $4.5k worth of charges through our stripe account and withdrew all of the funds. I structured an overall secure system - there was very little negligence on our side - and it all happened so fast.

Stripe support has been very surprising - you only get to speak to folks in the Philippines and they are of absolutely zero help. They told us we are fully responsible even though they gave us no alerts or warnings the issue was happening. They expect us to cover the full 4.5k, they will not help us with the stripe fees or chargeback fees.

It’s almost like they incentivize the fraud. It’s so disappointing. Stripe used to be such a decent company - it’s like they lost their soul…

Lesson - there’s not much of an alternative to stripe - but if you ever use stripe connect just know they will absolutely sell you out…

Comments

reassess_blind•3h ago
Can you explain exactly what they did to put you $4.5k in the red?

They created both selling and buying accounts on your platform, bought from themselves, withdrew from their selling accounts, and charged back the original payments?

breue•3h ago
yup! - exactly - except a lot of the cards they used were stollen and belonged to random people.
reassess_blind•3m ago
Yeah, that’s nasty. Stripe isn’t the problem here though, it’s not their responsibility to reimburse you for being a victim of a scam.

It’s worth fighting those chargebacks. If the chargebacks from stolen cards were initiated by the real card owners, it’s very unlikely you’ll win the disputes. However if the chargebacks were initiated by the fraudsters themselves, that’s a different story and you might have a good chance of winning some disputes.

Did your platform have payout delays for new accounts? 14 days? Did you use 3D Secure payments?

JULIOBAITELO•3h ago
pasapspoapaos

Ask HN: What in the world is taking Ubuntu so long?

182•linsomniac•10h ago•117 comments

Claude usage credits purchased after Dec 7 will expire 12 months after purchase

6•bbg2401•2h ago•0 comments

Tell HN: Be Careful with Stripe Connect

13•breue•4h ago•4 comments

Tell HN: Gemini trains on chat history, even for subscribers (personal accounts)

724•jameslk•2d ago•197 comments

Ask HN: What's your current AI agentic setup?

541•eggbrain•2d ago•675 comments

Slickdeals.net Is Compromised

17•intenex•6h ago•1 comments

Ask HN: What fun things to do with an iPhone 11?

5•wanderingpixel•10h ago•5 comments

Ask HN: What cryptography book do you recommend for reading with 10 year olds?

86•mike_richards•3d ago•83 comments

A new protocol and software suite for AIs

2•homingpigeon•6h ago•0 comments

Ask HN: What are forgotten topics in computing that deserve a new revisit?

41•draxen•23h ago•36 comments

Looking for a CTO

3•alpbahadur•8h ago•5 comments

OpenAI seems to be silently re-enabling model training on Codex chats

529•user052919•3d ago•163 comments

Seeking advice: Wix stolen my .com domain

7•wixcom•13h ago•10 comments

I tried to connect every GPU on the planet together (kinda)

4•lukefrisker•9h ago•2 comments

Ask HN: How are companies hiring developers nowadays?

3•Frazzlebilt•11h ago•2 comments

Ask HN: AI isn't intelligent :/ what is intelligence?

5•aaditsingal7859•11h ago•5 comments

Gitbook Breached

164•punchmesan•3d ago•45 comments

OpenClaw SaaS?

2•alexfthom•11h ago•9 comments

Ask HN: How to resist endless app directories listing your product?

2•gosen•11h ago•0 comments

Tell HN: Don't use Postman, they proxy your info without your permission

109•neya•2d ago•7 comments

Verifying a satellite image with temporal evidence

2•avijeetsingh16•13h ago•1 comments

Executive (C-Level) Decision Making Under Uncertainty with Large Language Models

2•northlondoner•13h ago•0 comments

Ask HN: Is anyone running multi/always-on agents that don't cost a fortune?

5•abejora•13h ago•3 comments

Ask HN: Banned for Reddit inauthentic ads?

3•polywickstudio•5h ago•1 comments

Ask HN: How's your home-cooked software revolution going?

3•nihakue•13h ago•3 comments

Ask HN: What is the most secure OS for mobile phone?

5•Muralnick•15h ago•2 comments

Ask HN: How can I get informed in the static vs. dynamic typing debate?

2•zingar•15h ago•4 comments

Ask HN: Engineers Focus Using AI

2•elchuzade•15h ago•1 comments

Ask HN: Has anyone used LLMs to audit TrueCrypt for backdoors?

4•dlphii•15h ago•1 comments

Is Paywall Bypassing Dead?

5•paulpauper•6h ago•1 comments