Hacker News new | ask | show | jobs
by stevoski 477 days ago
OP is in for a nasty surprise when they discover that the customers who complain the loudest are those that pay the least, and that it is difficult to turn a profit on a low-priced service due to the cost of acquiring customers.

Edit: And credit card fraud. A $5 price combined with a Stripe payment process is very attractive to people who want to test stolen credit card numbers.

3 comments

What's the solution for bad actors using your product to test stolen credit cards?
Why should you even care? You're not responsible for those cards.
When stripe charged you $10 for a chargeback on those transactions, unless stripe has changed its policy recently
You lose the original amount plus a fee on chargebacks. If you exceed a certain chargeback rate, your card processor bans you.
When you say something like this what are you hoping to accomplish? Should nobody build products like this?
OP addresses this directly, if you bothered to read the whole thing:

"The stakes should be low. Whatever you’re selling, it’s gotta be cheap. And if things go awry? No one’s going to launch a chargeback crusade. Just like a reliable vending machine, if it jams, it’ll return your coins."

I read it all. No need for snark.

Not sure which one of my points you are refuting with that quote.

If you introduce a process susceptible to credit card fraud then you're not keeping it low stakes.
I see.

I was commenting on the reality of his current site. He has a purchase form, where you purchase for $5, connected to Stripe.

In more detail:

A bad actor with a large quantity of stolen credit card info who finds this site (and eventually, someone always does) will use it to test whether each card works. Small-dollar-amount payment forms accessible without going through a sign-up-and-verify process attract these bad actors.

The point I was trying to make is that this won’t be the low-hassle, easy-to-run product that OP wants it to be.

Which sucks. It really does. The bad actors ruin this stuff.

(I write from the experience of running a pay-once B2C desktop app for 10 years and a B2B SaaS for 8 years.)

> test stolen credit card numbers

The stakes don't matter if you're testing credit card number. Just that the service tells you if it works or not. And low amounts are good, since you're not wasting the card's limit.