|
Even lower-level, anything consumable by, well, anyone, quickly transforms from add-to-cart, checkout, and ship (whether digitally or physically), to add-to-cart, checkout, make sure they're actually the cardholder and legitimately authorizing the purchase, ship. I have seen far too many places -- whether they're side projects, smb, or even enterprises -- completely miss the antifraud step. There are companies like MaxMind who <help identify and somewhat prevent this> but for someone who is above average-intelligence and an apt "carder", it's so trivial to get around. When I'm tasked by x company -- a bank, company, security team, or someone with a side project -- to run through their site and try to get an order shipped using false credentials, I can't even speak to how easy it is for me to do so with trivial effort. And it's not all fun to see. There is a company who does gift cards, and they'd ship them out instantly. Once redeemed by the other merchant, bam, they're SOL. Don't be this company. Don't be this entrepreneur. Don't be this hacker. Reach out to someone who knows what they're doing. If your business relies on conducting transactions, I don't care if it's flowers or dog leashes, or some shit that's going to end up on Shark Tank, you need to have anti-fraud in place. |