Yikes.
Yikes.
> How secure is Facebook Pay in online stores?
> To keep your information secure, your debit and credit card numbers are encrypted for safe and secure storage. This information won’t be shared with sellers.
> With Facebook Pay, you can create a PIN or use your device's face or fingerprint recognition to confirm payments. Learn how to set up a PIN for Facebook Pay.
> For transactions you make with Facebook Pay, you’ll receive payment confirmation details in an email. If you see a transaction you don’t recognize, please contact your bank or financial institution.
And
> Is there Purchase Protection for online shopping?
> Purchases made through third-party sites, local pickups, Messenger transactions, or through other messaging services don't qualify for Purchase Protection. Learn more about how Purchase Protection works on Facebook.
For EU countries this would probably be governed by the PSD2 payment services directive and the GDPR data protection.
Specifically, payment transaction data may reveal personal data and using it for other purposes than the payment itself would require explicit consent.
IANAL. It would be interesting if lawyers with up to data knowledge on financial regulations in various jurisdictions could elaborate on this.
This doesn't matter so much when sending money to friends, but an expected use case people imagine for facebook based p2p tx is fb marketplace, where you can buy things from random people online. A lot of fraud and sketchy behavior already happens there (eg. buying stolen products). Not being able to have easy reversion of such tx is bad for buyers (and good for fraudulent sellers).
Not sure if you're in the USA, but for US users, banks are pretty hands off this sort of behavior and will only reverse TX in serious fraud issues, but require the loser to pass a high bar to prove its fraud. Normal bank to bank tx is a "pull" model, so middle men services typically offer protection for the buyer to stop a "pull" in the case of fraud. Thats why the US has created many p2p services that are "push" based (eg. venmo, cash app), and why credit cards companies offer protections like charge reversal and take on that risk (you agree that you'll return money in a charge-back as a condition of VISA/etc letting you use the network).