Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
CC companies don't care about, name, address & zip verification?
5 points by quantumpotato_ on Sept 28, 2013 | hide | past | favorite | 4 comments
I was getting 200s from Stripe with bad card data.tl;dr:"CVC and address verification [zip]

We strongly encourage that you collect, submit, and verify this data in order to prevent internet fraud, but since the credit card networks do not require either field"

No way to verify the name -- but the card will be declined if it's wrong.On Fri, Sep 27, 2013 at 7:49 PM, <support@stripe.com> wrote: No. You can provide it, and a bank may choose to decline the card if it is incorrect, but you cannot yourself receive the information about whether or not the supplied name was correct.

On Sep 28, 2013 at 12:47 am <quantumpotato@gmail.com> wrote: Right, can it be verified?

On Sep 28, 2013 at 12:45 am <support@stripe.com> wrote: Correct, name is not strictly necessary.

On Sep 27, 2013 at 11:55 p <quantumpotato@gmail.com> wrote: Thanks! So name is not necessary

On Sep 27, 2013 at 10:41<support@stripe.com> wrote: Hi—This behavior is actually configurable: there are two checkboxes on the bottom of your account settings page (https://manage.stripe.com/account) to enable CVC and address verification.

We strongly encourage that you collect, submit, and verify this data in order to prevent internet fraud, but since the credit card networks do not require either field, we want to give our users the flexibility of choosing what data to collect when accepting payments.



All you need to move money from a credit card to your bank account is a card number. You don't have to collect, let alone verify, anything else at all.

If it turns out you don't have permission to do that, because the person presenting that card number is not the owner of the card, you'll lose that money, pay a fee, and your ability to accept other cards will be at risk.

AVS and CVC checks are tools to help you decide what payments you want to accept or reject. They're inputs for your fraud scoring algorithm. With some processors, you also get a discount for making use of them, as the processor and card network would both prefer not to have to drop you for getting too many chargebacks.


The credit card number itself is optional too.


Could you kindly elaborate on how you would charge someone's credit card immediately without the CC number? (that is, specifically NOT via cheque, bank number, wire transfer, or cash)


The more data you collect the harder it is for someone to claim they didn't authorize the charge. So know you don't need all that data, but if you had a dispute you would wish you had it.

Since your transaction fees are based partially on your dispute rates not collecting this data could move you from 3% to 5 or even 7%.

Imagine giving an extra 2% of your Gross to fees. So people collect more to limit fraud.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: