Welcome to the GoFuckYourself.com - Adult Webmaster Forum forums.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload content and access many other special features. Registration is fast, simple and absolutely free so please, join our community today!

If you have any problems with the registration process or your account login, please contact us.

Post New Thread Reply

Register GFY Rules Calendar
Go Back   GoFuckYourself.com - Adult Webmaster Forum > >
Discuss what's fucking going on, and which programs are best and worst. One-time "program" announcements from "established" webmasters are allowed.

 
Thread Tools
Old 06-24-2013, 03:41 PM   #1
NWB Guy
Registered User
 
Industry Role:
Join Date: Mar 2012
Location: West Coast
Posts: 55
Would this stop credit card fraud?

Hi folks,

I just want to run this method of fraud-prevention past you and get your feedback.

My main problem with fraud is with one guy, apparently in Brazil, who uses stolen credit cards to buy videos from my websites and then uploads them to the file lockers. Almost 100% of my piracy issues and about half of my fraud is generated by this one guy.

Here is what I would like my biller to do, in order to stop these transactions.

Change the code in the credit card approval step of the process include an IP address check, comparing the IP address of the town/city of the credit card owner/customer with the actual IP address of whoever is buying a video/members access.

If there is a difference of more than 200 or 300 miles, the credit card transaction would be declined.

I don't write computer code, but this does not seem to be impossible to me. Is this doable?

I ran this past CC Bill and was given the incredibly lame excuse that this would harm the customers who are traveling and want to make a purchase from their hotel room. I am not kidding, this was their response to my attempt to cut down on credit card fraud.

Are there any billers who do this, because if there are, I will seriously consider swapping over to them. There is no reason to live with stolen credit cards if I don't have to.

Thanks,

Jeff
__________________
www.northwestbeauties.com
NWB Guy is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-24-2013, 03:48 PM   #2
slapass
Too lazy to set a custom title
 
Join Date: Nov 2002
Location: Earth
Posts: 14,622
I would have issues as I travel a lot but otherwise it is a good idea.
slapass is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-24-2013, 03:51 PM   #3
ottopottomouse
She is ugly, bad luck.
 
ottopottomouse's Avatar
 
Industry Role:
Join Date: Jan 2010
Posts: 13,177
my mobile usually shows up as not even in the correct country, and my home internet connection doesn't locate to within 200 miles because of where the block of IP addresses is registered to.
__________________
↑ see post ↑
13101
ottopottomouse is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-24-2013, 03:53 PM   #4
Sly
Let's do some business!
 
Sly's Avatar
 
Industry Role:
Join Date: Sep 2004
Location: Austin, TX
Posts: 31,327
Your guy that tries so hard to circumvent the process would simply catch on and use an IP within the XXX mile radius of the credit card holder. So it may slow him down a bit, I don't see it stopping him though.
__________________
Vacares - Web Hosting, Domains, O365, Security & More - Paxum and BTC Accepted

Windows VPS now available
Great for TSS, Nifty Stats, remote work, virtual assistants, etc.
Click here for more details.
Sly is online now   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-24-2013, 03:57 PM   #5
iSpyCams
Amateur Gynecologist
 
Industry Role:
Join Date: May 2009
Location: Medellin
Posts: 4,436
With Netbilling you can decline sales where the card issuer country is different from the IP address.
__________________
- As soon as I think up a good sig it's going here.
iSpyCams is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-24-2013, 03:57 PM   #6
adulttraffic
Confirmed User
 
adulttraffic's Avatar
 
Industry Role:
Join Date: Mar 2006
Posts: 797
Quote:
Originally Posted by NWB Guy View Post
Hi folks,

I just want to run this method of fraud-prevention past you and get your feedback.

My main problem with fraud is with one guy, apparently in Brazil, who uses stolen credit cards to buy videos from my websites and then uploads them to the file lockers. Almost 100% of my piracy issues and about half of my fraud is generated by this one guy.

Here is what I would like my biller to do, in order to stop these transactions.

Change the code in the credit card approval step of the process include an IP address check, comparing the IP address of the town/city of the credit card owner/customer with the actual IP address of whoever is buying a video/members access.

If there is a difference of more than 200 or 300 miles, the credit card transaction would be declined.

I don't write computer code, but this does not seem to be impossible to me. Is this doable?

I ran this past CC Bill and was given the incredibly lame excuse that this would harm the customers who are traveling and want to make a purchase from their hotel room. I am not kidding, this was their response to my attempt to cut down on credit card fraud.

Are there any billers who do this, because if there are, I will seriously consider swapping over to them. There is no reason to live with stolen credit cards if I don't have to.

Thanks,

Jeff
Their gripe is legit and using ips to geo locate someone is not very accurate. Your best bet is to monitor all signups and kill off ones this guy is making.
__________________
Respect My Authoritah!
adulttraffic is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-24-2013, 03:58 PM   #7
Zeiss
Confirmed User
 
Industry Role:
Join Date: May 2012
Location: With your mom
Posts: 5,189
That sucks big time, Jeff. I don't know what to recommend but what you suggest (the IP thing) is not a good idea. IP is easier to get than stealing credit card data...
__________________


Adult Webmasters Guides
Zeiss is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-24-2013, 04:21 PM   #8
Adraco
Confirmed User
 
Adraco's Avatar
 
Industry Role:
Join Date: May 2009
Location: Onboard an airplane around the globe
Posts: 3,736
I have internet access via an office network, and that IP shows as if I'm located in Holland no matter where in the world I connect from. So that would effectively prevent me from buying anything at all online.
__________________
----------------------------------------------------------------------------------
The truth is not affected by the beliefs, or doubts, of the majority.
Adraco is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-24-2013, 04:46 PM   #9
2MuchMark
Videochat Solutions
 
2MuchMark's Avatar
 
Industry Role:
Join Date: Aug 2004
Location: Canada
Posts: 49,238
Hi Jeff,

Netbilling does this for you already. But if you're not with netbilling you can do this on your own. Sure he can use proxies but Netbilling also blocks known proxies from buying if you enable it.

If you can write basic code you can write a small program to filter out IP addresses you don't want, or write a program to display all of your sales along with the IP addreses. Link the IP addresses to a GeoIP location service (there are lots of free ones) and when you see the geo location fall within the range you want to block, delete his account and refund the purchase before it becomes a chargeback.
__________________

Custom Coding | Videochat Solutions | Age Verification | IT Help & Support
www.2Much.net
2MuchMark is online now   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-24-2013, 04:46 PM   #10
directfiesta
Too lazy to set a custom title
 
directfiesta's Avatar
 
Industry Role:
Join Date: Oct 2002
Location: Montreal, Quebec
Posts: 29,644
Isn't this what MaxMind does ewhen integrated in a shopping cart ???
__________________
I know that Asspimple is stoopid ... As he says, it is a FACT !

But I can't figure out how he can breathe or type , at the same time ....
directfiesta is online now   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-24-2013, 05:03 PM   #11
NWB Guy
Registered User
 
Industry Role:
Join Date: Mar 2012
Location: West Coast
Posts: 55
Thanks for all of the replies folks.

I did not take mobile devices into account. I have a picture in my mind of a customer sitting at his computer, but I realize the world has changed and lots of customers are using smart phones and such.

How about this: have the user name and password randomly generated and only available through email. That would force the thief to use an actual email address in order to log in.

Would it be feasible to track someone down via their email address?

I realize that there are some thieves who will be able to work around anything we try to do, but unless they are making tons of money, would it be worth their while?

I just wish that the credit card industry and billers would take a more proactive role in fighting against theft and abuse, rather than just writing it off as a loss on their income taxes. If the general public knew that efforts were at least being attempted, they might think twice.
__________________
www.northwestbeauties.com
NWB Guy is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-24-2013, 05:58 PM   #12
iSpyCams
Amateur Gynecologist
 
Industry Role:
Join Date: May 2009
Location: Medellin
Posts: 4,436
Quote:
Originally Posted by NWB Guy View Post
Thanks for all of the replies folks.

I did not take mobile devices into account. I have a picture in my mind of a customer sitting at his computer, but I realize the world has changed and lots of customers are using smart phones and such.

How about this: have the user name and password randomly generated and only available through email. That would force the thief to use an actual email address in order to log in.

Would it be feasible to track someone down via their email address?

I realize that there are some thieves who will be able to work around anything we try to do, but unless they are making tons of money, would it be worth their while?

I just wish that the credit card industry and billers would take a more proactive role in fighting against theft and abuse, rather than just writing it off as a loss on their income taxes. If the general public knew that efforts were at least being attempted, they might think twice.
Yeah 5 years ago I could effectively scan for duplicate IP addresses and limit a lot of fraud that way, these days doing that gets you about 80% false positives because there are just so many people with mobile phones and a lot of those mobile carriers only have a handful of proxy servers that they route all their customer's traffic through.
__________________
- As soon as I think up a good sig it's going here.
iSpyCams is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-24-2013, 06:08 PM   #13
Barry-xlovecam
It's 42
 
Industry Role:
Join Date: Jun 2010
Location: Global
Posts: 18,083
AVS or Address Verification System
http://en.wikipedia.org/wiki/Address...ication_System

It can be rather heavy handed when used as a scrub -- the fraudster can circumvent it. However, there are ways to detect VPNs or proxies and get the user's real IP.

^^ Mobile networks are an known issue

Last edited by Barry-xlovecam; 06-24-2013 at 06:09 PM..
Barry-xlovecam is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-24-2013, 08:41 PM   #14
DVTimes
xxx
 
Industry Role:
Join Date: Jun 2003
Location: UK
Posts: 31,544
The saftest way would be if you were sent a confirmation email or text (to your phone). You would have tyo confirm this before payment went through.

Your email or text would be registered at the time you got your card.

This way only the person who owns the card could make payments.
__________________
The Affiliate Program
DVTimes is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-24-2013, 08:51 PM   #15
adulttraffic
Confirmed User
 
adulttraffic's Avatar
 
Industry Role:
Join Date: Mar 2006
Posts: 797
Quote:
Originally Posted by DVTimes View Post
The saftest way would be if you were sent a confirmation email or text (to your phone). You would have tyo confirm this before payment went through.

Your email or text would be registered at the time you got your card.

This way only the person who owns the card could make payments.
Great idea!, who the fuck wants to manually approve signups all day? lol
__________________
Respect My Authoritah!
adulttraffic is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-24-2013, 10:41 PM   #16
spunky99
Confirmed User
 
spunky99's Avatar
 
Industry Role:
Join Date: Jan 2004
Location: Vancouver
Posts: 3,462
we compare every ip to the location given when signing up, its amazing how many americans travel to ghana and nigeria and signup for our sites, they really like the big boob girls too
spunky99 is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-24-2013, 11:36 PM   #17
Paully
www.Max-Hardcore.com
 
Paully's Avatar
 
Industry Role:
Join Date: Nov 2005
Posts: 1,556
I get card rejects from Zombaio for this routinely. They call it a BIN mismatch. Meaning the customers banking id number(banking branch) and his IP are too far apart. Dont know how far that is though. I think it requires a form of id or at least contact from the user to make the sale if theyre traveling.

If you have your own merchant acct. check with Net Billing fo sho. I like those guys and have only heard good shit about them.

Paully
Paully is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-24-2013, 11:40 PM   #18
NETbilling
Confirmed User
 
NETbilling's Avatar
 
Industry Role:
Join Date: Jan 2002
Location: Huntington Beach, CA
Posts: 8,584
Quote:
Originally Posted by NWB Guy View Post
Hi folks,

I just want to run this method of fraud-prevention past you and get your feedback.

My main problem with fraud is with one guy, apparently in Brazil, who uses stolen credit cards to buy videos from my websites and then uploads them to the file lockers. Almost 100% of my piracy issues and about half of my fraud is generated by this one guy.

Here is what I would like my biller to do, in order to stop these transactions.

Change the code in the credit card approval step of the process include an IP address check, comparing the IP address of the town/city of the credit card owner/customer with the actual IP address of whoever is buying a video/members access.

If there is a difference of more than 200 or 300 miles, the credit card transaction would be declined.

I don't write computer code, but this does not seem to be impossible to me. Is this doable?

I ran this past CC Bill and was given the incredibly lame excuse that this would harm the customers who are traveling and want to make a purchase from their hotel room. I am not kidding, this was their response to my attempt to cut down on credit card fraud.

Are there any billers who do this, because if there are, I will seriously consider swapping over to them. There is no reason to live with stolen credit cards if I don't have to.

Thanks,

Jeff
Hi,

You can easily do this in our system and have full control over almost ALL of the fraud tools (except a few secret things that we do on the backend).

Please contact our sales department for a demo/walkthrough. You will be impressed.

Mitch
__________________


Mitch Farber
CEO - NETbilling, Inc.
Email / Phone: 888-357-8166 / 661-252-2456
Transaction processing & 24/7 call center services with exceptional rates and flexibility, since 1998!
NETbilling is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-25-2013, 02:21 AM   #19
PhoneSexKing
Confirmed User
 
PhoneSexKing's Avatar
 
Industry Role:
Join Date: Jun 2013
Location: a frozen wasteland
Posts: 190
The only sure way to stop credit card fraud is to stop taking credit cards.
PhoneSexKing is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-25-2013, 02:30 AM   #20
paffie
Confirmed User
 
Industry Role:
Join Date: Mar 2013
Posts: 116
I think CCbill's concerns are legit... About 50% of the time, I use a VPN... So, altough i'm a legit user, i might signup from london, login from toronto, but my credit card is issued in Belgium....

I think it might give you a lot of negative publicity by every security freak out there (including myself)...

The other concerns are legit to... Even the GeoIP database is not that accurate, it might cost you a lot of visitors.

I do like your other idear: having to verify your cellphone. On the other hand, maybe it'll harm your signup ratio?

you would think a credit card company would file a complaint agains this guy, and put a lot of good researchers on his case? But even then, if you use a good VPN, combine it with a good proxy (or a proxy chain), and the best researcher in the world will have troubles tracking you down :-(

Last edited by paffie; 06-25-2013 at 02:32 AM..
paffie is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-25-2013, 04:13 AM   #21
fuzebox
making it rain
 
fuzebox's Avatar
 
Industry Role:
Join Date: Oct 2003
Location: seattle
Posts: 22,107
Quote:
Originally Posted by PhoneSexKing View Post
The only sure way to stop credit card fraud is to stop taking credit cards.
So true. One of the costs of doing business.

A city-specific scrub would grind your legitimate signups to a halt
fuzebox is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-25-2013, 07:30 AM   #22
NETBilling-Andy
Confirmed User
 
Industry Role:
Join Date: Aug 2002
Location: Phoenix
Posts: 182
Hi Jeff,

After having worked for CCBill for over 10 years, I understand your frustration with the fraud system there. While they do have a small number of different fraud profiles, you really cannot tinker with it yourself, or have control over it at all. With NETbilling - it's just the opposite. You have complete control over the fraud settings and can customize it perfectly to fit your needs as a business owner. All the while, processing payments at a much lower cost than CCBill. I'd love to give a short demo of the fraud system to you and see what you think! If interested, shoot me a message and we'll set it up. Thanks!
__________________
Andrew Kiefer Sales Account Executive / Merchant Relations
(888) 357-8166 | (661) 252-2456
ICQ: 685463252 | Skype: andyk9876
NETBilling-Andy is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-25-2013, 07:36 AM   #23
AdultKing
Raise Your Weapon
 
AdultKing's Avatar
 
Industry Role:
Join Date: Jun 2003
Location: Outback Australia
Posts: 15,601
The OP should email all the details of the files downloaded and any other relevant information to [email protected]

We have a fairly good database of uploaders now and may be able to slow him down a bit by having his Paypal and other payment accounts shut down.
AdultKing is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-25-2013, 09:11 AM   #24
NWB Guy
Registered User
 
Industry Role:
Join Date: Mar 2012
Location: West Coast
Posts: 55
Well, it looks like I will check out Net Billing, although I love almost everything about CC Bill. I am just not ready to roll over and accept the situation.

Update: early this morning, that guy bought 14 videos using a California address with a Virginia IP address. Those videos will be showing up on Kitty Kats and elsewhere.

I understand the concerns about harming my sales up front, but piracy takes sales away as well.

I do remember approving each sale individually. For a few months, maybe in 1999 or 2000, the biller's software was not compatible, so I was getting all the credit card information from the customers. That was very creepy and I moved on to another hoster and biller. Can't even remember the name, but I have not heard about them for a decade, not much of a surprise.
__________________
www.northwestbeauties.com
NWB Guy is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-25-2013, 10:18 AM   #25
NETBilling-Andy
Confirmed User
 
Industry Role:
Join Date: Aug 2002
Location: Phoenix
Posts: 182
Sounds good - we're here to help. Shoot me an email at andy @ netbilling.com. Thanks!
__________________
Andrew Kiefer Sales Account Executive / Merchant Relations
(888) 357-8166 | (661) 252-2456
ICQ: 685463252 | Skype: andyk9876
NETBilling-Andy is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-25-2013, 10:46 AM   #26
NETbilling
Confirmed User
 
NETbilling's Avatar
 
Industry Role:
Join Date: Jan 2002
Location: Huntington Beach, CA
Posts: 8,584
Quote:
Originally Posted by NWB Guy View Post
Well, it looks like I will check out Net Billing, although I love almost everything about CC Bill. I am just not ready to roll over and accept the situation.

Update: early this morning, that guy bought 14 videos using a California address with a Virginia IP address. Those videos will be showing up on Kitty Kats and elsewhere.

I understand the concerns about harming my sales up front, but piracy takes sales away as well.

I do remember approving each sale individually. For a few months, maybe in 1999 or 2000, the biller's software was not compatible, so I was getting all the credit card information from the customers. That was very creepy and I moved on to another hoster and biller. Can't even remember the name, but I have not heard about them for a decade, not much of a surprise.
CCbill is good but it just sounds like you are ready to take more control over your processing and I am sure you would like to save money too, correct?

Mitch
__________________


Mitch Farber
CEO - NETbilling, Inc.
Email / Phone: 888-357-8166 / 661-252-2456
Transaction processing & 24/7 call center services with exceptional rates and flexibility, since 1998!
NETbilling is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-25-2013, 02:42 PM   #27
Harmon
( ͡ʘ╭͜ʖ╮͡ʘ)
 
Harmon's Avatar
 
Industry Role:
Join Date: Mar 2004
Posts: 20,010
Quote:
Originally Posted by NETBilling-Andy View Post
Hi Jeff,

After having worked for CCBill for over 10 years, I understand your frustration with the fraud system there. While they do have a small number of different fraud profiles, you really cannot tinker with it yourself, or have control over it at all. With NETbilling - it's just the opposite. You have complete control over the fraud settings and can customize it perfectly to fit your needs as a business owner. All the while, processing payments at a much lower cost than CCBill. I'd love to give a short demo of the fraud system to you and see what you think! If interested, shoot me a message and we'll set it up. Thanks!
Kind of a low blow to the competition, bro. Just sayin
__________________
[email protected]
Harmon is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-25-2013, 04:16 PM   #28
adultmobile
No, I am not banned
 
adultmobile's Avatar
 
Industry Role:
Join Date: Nov 2003
Location: ChatGF.com
Posts: 5,345
As others noted, guys travel and ISP also are localized wrongly, this coupled it means you would decline 99% of correct sales and 1% of fraud ones. Additionally, if the guy is skilled, he know how to fake the IP of correct city, so you would actually ban everyone legit who traveled, except the fraud guy.
Those IP's of him are from what ISP and cities, does it match city or no? In general only retard carders use non-isp or isp with wrong city, those I see most often use normal comcast or similar ISP from the correct city as cardholder, fine job.
I do the fraud check for cam sites, it is a little "easier" because they guy also chats and you guess who he is from behavious and slang there; also you don't get so many guys signup a cam site and spend $500 immediately, so you can monitor new signups for unlikely immediate whales. In case of yours, carder blends easier as pay once and same as everyone else... I would say if the guy is skilled with IP->city , and if cards are normal, then there's no real solution. I say cards normal.. because you can see the BIN (bank issuer) of the cards, some use neteller or virtual cards of indonesia, its' so easy to find that.. but note the banks and visa/mc are real retard because allow to write "Santa Claus" or any name and address, and the sale is approved. I had guys write John Smith's of USA approved in all billers, while card was virtual ones from islands or funny places. Visa/mc should NOT allow cards approved without check cardholder name... in ideal world.
__________________

TubeCamGirl.com

Last edited by adultmobile; 06-25-2013 at 04:18 PM..
adultmobile is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Post New Thread Reply
Go Back   GoFuckYourself.com - Adult Webmaster Forum > >

Bookmarks



Advertising inquiries - marketing at gfy dot com

Contact Admin - Advertise - GFY Rules - Top

©2000-, AI Media Network Inc



Powered by vBulletin
Copyright © 2000- Jelsoft Enterprises Limited.