Hacker News new | ask | show | jobs
by fcolas 2458 days ago
@southbaybox, I've seen a similar issue a few months back: . https://news.ycombinator.com/item?id=19126301 (2019-02-08, crypto-currencies)

For a few years I worked on a startup that aimed to address fraud management in e-commerce from a quantitative risk modelling perspective. And when Stripe released radar 2.0, I went through their docs. I was impressed by Stripe's marketing (docs) and UI—they're knowingly good for that, but I was much less impressed by radar 2.0's feature-set and product. The biggest issue for me was their "one-size-fit-all" approach, because that just does NOT work in what I've seen, i.e., both billion- and million-euro businesses.

From a risk management perspective, a 2-7% gross margin e-commerce manages risk totally differently than a 50%+ gross margin e-commerce. For one, the false negative (i.e., a fraud gets through) is super-expensive. For the other, a false positive (i.e., a real client is stopped) is super expensive. And I did not see anywhere in their docs how they integrated the cost-imbalance of the risk for each of their client (you), and event less for each of their client's clients! It's possible to do, but it's hard.

Of course, like any fraud prevention system, radar 2.0 allows clients to add rules and lists to customise their logic, but these mechanisms are difficult to setup when you start processing payments, because you don't have yet any payment history, as well as when your e-commerce gains in velocity and complexity, because you don't necessarily have the in-house resources or skills to keep your rules and lists up to date and well maintained.

And in the lucky case that one just feels happy with Stripe's radar 2.0 system, then how do you know that you're not loosing customers? Having no risk of chargeback is very easy, just don't accept any payment and you've a risk-free e-commerce! In my experience, we increased sales by 7% (a few tenths of millions of euros) by just re-parameterising how fraud was managed. I don't see anywhere anywhere in the docs why and how I should trust radar 2.0 for the specifics of e-commerce A, B, and C. One-size-fit all just doesn't work.

As a former startup founder in that area, I still see we're a long way towards personalised risk management in e-commerce services, that would help owners throughout the different stages of their e-commerce, i.e., idea, proof of concept, scaling, growth... sounds similar?

Best of luck :-)