[jasonlotito]

I don't have any evidence I can point to. However, I can reference the hundreds of millions of dollars processed through various payment systems I oversaw to state that if you were trying to pay through a VPN, it would classified as extremely high risk, and outside of a few extenuating circumstances, we'd simply deny the transaction.

When researching the various scoring mechanisms, we generally find that the VPN was generally just used for masking purposes, so we'd see multiple attempts go through using multiple names and addresses.

Also, the chances of getting a stolen card response back from the bank was much higher.

This isn't to say that a VPN means you are a thief. What it does mean, however, is that the risk far outweighs the potential benefits.

[weavejester]

Isn't paying through a VPN a rather different matter to paying for a VPN? I mean, there's no point to using a privacy VPN to hide your identity only to then give out your credit card details, so it sounds like an inherently biased scenario.

[kbenson]

If you are going to use a VPN to charge stolen credit cards, you sure aren't going to use a real credit card to purchase the VPN service, which could then be linked back to you.

[weavejester]

That's true, but I don't see how that relates to the point.

[_mulder_]

Well I imagine it might go something like this:

Bad guy gets CC details

Uses stolen CC to sign up to VPN

Goes on a shopping spree via the VPN so law enforcement can't trace him

So you're going to see more use of VPNs by fraudsters trying to hide than you are genuine users... hence the ban.

[weavejester]

I agree that some users use VPNs for credit card fraud. What I find hard to believe is that the majority of VPN users are committing credit card fraud. If nothing else, it would be difficult for VPNs to make a profit if they had that many chargebacks.

[jasonlotito]

> What I find hard to believe is that the majority of VPN users are committing credit card fraud.

The problem isn't the majority. The problem is just a significant amount. Keep in mind how low the chargeback rates need to be to avoid serious penalties. Also, keep in mind the number of people isn't the issue, but it's the number of fraudulent transactions that occur. One person can attempt many.

It's an attack vector, and one person can cause problem for many, many customers.