Hacker News Reader

Comment by sky2224 | Hacker News Reader

What have you switched to that isn't PayPal and also doesn't have this issue?

I'm not that commenter but my business also moved away from PayPal and is using Stripe + Sezzle for transaction processing. It has been about five years now without any issues at all.

Easy example is Stripe. You can enable 3DS, and you can listen for 'early_fraud_warning' events on a webhook to refund users & close accounts to avoid chargebacks and all the associated fees and reputation penalties.

Part of the problem is that not all countries have the same solutions, but credit/debit cards are an easy solution. In some countries that requires 2FA using a government issued ID. It's not 100% secure, people being people and doing stupid things, but it's better. If you're in the US, I don't know, it might not be better. If you can, ask your credit card processor to block cards that's not in the area you serve. E.g. we had huge success in blocking UK and US credit cards from our Scandinavian stores.

In Scandinavia there's also MobilePay, which is much much better, as it is also closely linked to real identities.

> In Scandinavia there's also MobilePay, which is much much better, as it is also closely linked to real identities.

Don't forget vipps, I think it also works in Poland now in addition to various nordic countries.

Vipps and MobilePay merged, so it's the same product now. It's MobilePay in Denmark and Finland, and Vipps in Norway and Sweden... and apparently Poland.

And in Sweden we have Swish

The problem with using credit/debit directly is that it requires the customer to trust you with their credit card number.

The nice thing about Paypal is I click the button and a window pops up that Firefox recognizes as coming from Paypal to autofill my login info, then Paypal confirms the payment info and gives the website just the payment info. With a credit card, even if you have a different payment processor with an icon next to it that says "secure", there's not actually any way for me to be sure at a glance that that isn't Stripe_Secure_Checkout_Confirmation.SVG and that you aren't just harvesting my credit card info, other than other contextual information on your website and your company's reputation as an actual company that does actual business in the real world.

Reply on news.ycombinator.com