This whole idea of storing a payment token that a company can charge at will (as opposed to a fixed top-up with cash) and then for me to be unable to deny those charges, I find it all unacceptable and refuse to allow it ever.
After providing such a payment token there should be no proof and dispute involved, just a single click in a web interface "I refuse to pay for that and I revoke the token". The user of the token should make sure I am happy so he can continue to charge the token.
This is in sharp contrast with user initiated payments for a fixed amount, that should be carefully secured, require strong authentication and should almost never be reversible, unless actual fraud can be proven by the payer.
The problem with cards on the internet and their high abuse and chargeback rates, for which we all pay, is that they conflate these fundamentally different use cases into a single set of static numbers.
After providing such a payment token there should be no proof and dispute involved, just a single click in a web interface "I refuse to pay for that and I revoke the token". The user of the token should make sure I am happy so he can continue to charge the token.
This is in sharp contrast with user initiated payments for a fixed amount, that should be carefully secured, require strong authentication and should almost never be reversible, unless actual fraud can be proven by the payer.
The problem with cards on the internet and their high abuse and chargeback rates, for which we all pay, is that they conflate these fundamentally different use cases into a single set of static numbers.