Hacker News new | ask | show | jobs
by tempnow987 1589 days ago
Ignore all the folks saying don't ask this question. Dealing with fraud / abuse issues is not uncommon.

Generally you do a few things.

If something makes you feel uncomfortable, and your agreement allows it, close out the customers account.

Just like facebook / google and friends, I've found it better NOT to get into a lot of back and forth or just point to a generic policy (ie, overseas accounts not supported).

If you need to refund money, make sure you only refund to same payment method. Ie, a credit card refund should not go out by check. I've seen scammers use this with a stolen card, then try and get the refund by check. A few months later card owner contests bill. If you refund back to same card, then when owner protests, the money is already back, nothing to protest.

Consider a hold on funds if you are concerned that they will be returned to issuing entity if you a in the middle on a payment flow. If so you want to make sure your money handling stuff is compliant anyway with KYC and transfer licensing needs.