Stripe does do pretty good, but I don't understand the scores for some.

I'm looking at a payment I refunded today with a ZERO risk score.

1 minute before this one went through, the same Stripe customer tried a different card and it was blocked with the message "Don't tell the customer that the card was reported lost. Instead, direct them to contact the issuing bank."

The same IP address has THIRTY blocked payments using dozens of different cards over the course of 2 hours.

Their IP address is in the USA and is a VPN. The card originated from Singapore. Their billing address is the Philippines. The name they used is "jake smith".

Again, ZERO risk score out of 100 from Stripe. What the hell...