Spent a few hours today manually refunding 50+ payments. It would have been a ton more but we already setup some pretty strict rules several weeks ago when this happened before.
Contacting Stripe back then was a complete waste of time.
We implemented a bunch of rules manually which mostly fixed the issue and I reached out to support to ask if there was anything else we should do.
A few days later they said we need to "take immediate action" and offered only generic advice.
I told them what we already did (implementing the Radar rules manually) and they said oh yeah seems fine, looks like it stopped. But the kicker is we did that before they reviewed our account and told us we needed to take action. What a joke.
This was after spending tens of thousands in fees in a single month with them.
The only reason some of these payments went through this week is because of the ridiculously low Risk Score that Stripe assigned some of the payments so our rules weren't triggered (why worry about a transaction if Stripe gave it a 0 out of 100 risk score?)
I really want to know how Stripe can assign a ZERO risk score to a customer using a card from a different country from the IP, with the wrong country in the billing address, with no CVC pass, and with a lot of related failed payments from different cards associated with the same IP/email. Madness.
Contacting Stripe back then was a complete waste of time.
We implemented a bunch of rules manually which mostly fixed the issue and I reached out to support to ask if there was anything else we should do.
A few days later they said we need to "take immediate action" and offered only generic advice.
I told them what we already did (implementing the Radar rules manually) and they said oh yeah seems fine, looks like it stopped. But the kicker is we did that before they reviewed our account and told us we needed to take action. What a joke.
This was after spending tens of thousands in fees in a single month with them.
The only reason some of these payments went through this week is because of the ridiculously low Risk Score that Stripe assigned some of the payments so our rules weren't triggered (why worry about a transaction if Stripe gave it a 0 out of 100 risk score?)
I really want to know how Stripe can assign a ZERO risk score to a customer using a card from a different country from the IP, with the wrong country in the billing address, with no CVC pass, and with a lot of related failed payments from different cards associated with the same IP/email. Madness.