Hacker News new | ask | show | jobs
by zrail 3921 days ago
I built this kind of check into my ecommerce sites for high-value items. They're disproportionally susceptible to fraud and carding for some reason, and implementing a "no free email provider" check has cut fraud on those items to zero.
4 comments

Yes, this. Processing fraudulent cards can result in a costly sum of chargebacks for the seller, and a fake email address is a very strong indicator that the person is a fraudster. Other services like Maxmind minFraud consider the email address and many other attributes when ranking the likelihood that the order is coming from a fraudster. It doesn't mean that you have to disallow the order from being saved (or whatever), just that you might want to flag it for manual review before processing the CC to capture payment.
I work at a financial institution and disposable e-mails are used by fraudsters all of the time. This is certainly better than my current blacklist.
Do you blacklist gmail and hotmail addresses as well? It takes 5 minutes to put a throwaway gmail account together.
I expect blocking GMail, Hotmail, & Yahoo Mail also cut your conversion rate close to a factor of zero of what it would otherwise be.
Nope. The blocking is only active on certain products over $500 that don't make sense for non-companies to buy.
This point is orthogonal to the OP's.
OP's point as I understand it is "there is no circumstance where you need this, because you're either providing value or you're shit."

My point is that there are legitimate circumstances where you are providing value but in a way that people take advantage of for unrelated fraudulent purposes.