[curiousgal]

Honest question, what exactly do people mean by fraud? How could someone exploit a payment page?

[amelius]

Also, how would fraud detection work in Europe, where there is the GDPR?

[carstenhag]

The GDPR doesn't say "You can't do anything", the tldr of it rather is "the user must be informed and/or you must have their opt-in, then it's allowed"