Stripe 对“友好欺诈”很宽容。
Stripe is friendly to “friendly fraud”

原始链接: https://www.gingerlime.com/2026/stripe-seem-friendly-to-friendly-fraud/

作者讲述了一次遭遇“友好欺诈”(friendly fraud)的沮丧经历:一位顾客在收到产品后,恶意发起虚假拒付,甚至还炫耀自己的这种欺诈手段。尽管作者向 Stripe 提供了详尽证据,包括送货证明和顾客自证其罪的邮件,但银行最终还是偏袒了顾客,导致作者不仅损失了货款,还要承担运费和拒付手续费。 问题的核心在于 Stripe 的应对机制:他们拒绝利用已确认的拒付滥用证据来更新其跨商户的欺诈预警信号。虽然 Stripe 凭借其庞大的网络数据优势推销“Radar”工具,但实际上他们将每一位商户都视为一座孤岛。由于未能标记出平台上的重复作恶者,Stripe 变相允许这些诈骗分子继续在其他卖家身上行骗而无需承担后果。作者认为,Stripe 目前的做法让小型商户毫无防备,因为他们被迫独自应对复杂多样的欺诈手段,而 Stripe 对这些明显的滥用行为却表现得漠不关心。归根结底,这一系统不仅让商户投诉无门,更未能发挥现代支付保护体系核心应有的网络效应。

这篇 Hacker News 讨论聚焦于一篇博客文章,该文章称 Stripe 在处理“友好欺诈”(即客户发起不合理拒付的情况)时过于宽容。 评论者对商家的不满反应不一。一些人提出了实用的缓解策略,例如主动将欺诈用户的信用卡、电子邮件地址和数字指纹列入黑名单。另一些人则讨论了 Stripe 争议解决工具的有效性,指出虽然 Stripe 使用了“Visa 强有力的证据 3.0”(Visa Compelling Evidence 3.0)等协议,但这些措施并不总是适用于新客户。 辩论的很大一部分内容在于质疑责任究竟在于 Stripe 还是在线支付的固有本质。怀疑论者指出,商家的不满可能被误解了,因为客服人员往往受到法律和程序限制的制约。最终,许多参与者得出结论,支付处理商几乎没有动力去改变,因为商家为了维持获取绝大多数合法客户的渠道,实际上被迫接受偶尔发生的“友好欺诈”作为“经营成本”。
相关文章

原文

Friendly fraud is the laundered name for something that the payment system is not really able to prevent. Even though I’m pretty sure they can do way better. Particularly big and sophisticated payment providers like Stripe, with a mountain of signals.

I had a customer buy my product twice. It’s called Ciglue. It’s cigar glue. Not Rolex or iPhone. The first order was shipped with DHL and delivered, with proof of delivery. The customer didn’t contact to request a refund or a re-delivery, but I saw a dispute filed, so I reached out to them.

They said it was the bank’s mistake because the bank bundled this payment with some real fraudulent transactions from the Philippines. They promised to contact their bank and even offered to pay me back via Paypal. I was happy that it’s just a misunderstanding. I submitted the evidence of the delivery, customer communication, website policies, everything by the book.

It turned out the customer was doing it on purpose, and lying to me. They not only didn’t contact the bank to correct the situation, they actually pretended not to have received the product. And the bank, naturally, sided with them. I had no recourse. Dispute granted. Money, product, shipping and dispute fees, all gone. This is annoying, but not exactly unheard of. If you sell online, you probably know the feeling: you send the product, collect the evidence, submit everything properly, and then somehow still lose.

Before the dispute came in, the same customer placed another order, this time with untracked shipping, and a few days after the first dispute, another dispute followed. Once the first dispute was granted, things became clear. The customer emailed me to gloat about their clever scheme. Literally giving me the finger.

I sent the screenshots to Stripe and asked if this could be reported properly. To the bank, to some fraud reporting network, or even just internally inside Stripe.

I wasn’t expecting Stripe to recover the money or reverse a closed dispute. I understand that the customer’s bank makes the final decision, and that card network rules are what they are. But I did expect the report itself to matter. This is a very clear case of “friendly fraud”. The card belonged to the customer, the address was valid etc. The customer appeared to enjoy screwing me over. Pretty sad considering this is a pretty cheap product in a niche hobby. But still.

I would have expected Stripe to use this evidence in some way to feed into the sophisticated machine-learning anti-fraud system. But No.

After quite a bit of back and forth, Stripe’s answer seems to be that it doesn’t really matter beyond my own account.

They told me they don’t use evidence of chargeback abuse from one merchant to create cross-merchant fraud signals, or to take action against the customer’s card, email, or other details for other merchants.

You probably don’t want a system where one annoyed merchant can get someone blocked across the whole Stripe payment system. But there’s a pretty big gap between “automatically block this person everywhere” and “thanks for the screenshots, please consider Radar”, and this is where it gets frustrating.

Stripe sells Radar on the strength of its network: lots of payments, lots of signals, better fraud detection, machine learning, etc. Stripe sees a lot of transactions, so in theory it can spot things that an individual merchant can’t. But when a merchant sends actual evidence that a customer is abusing chargebacks, suddenly it means nothing. The recommended solution is to use Radar rules to block the customer from buying from me again. And I probably have to upgrade and pay Stripe to use this rule anyway. Gee thanks!

The next merchant still starts from zero. This is also not the kind of fraud Radar can easily solve before the payment. The transaction looked fine, checks passed, physical address matched. The abuse happened later, through the dispute process. There is no clever checkout rule for “customer receives the product and later lies to their bank”.

Small merchants already have very little leverage in disputes: the bank decides, Stripe points at the bank, and I lose the money, the product, the dispute fee, and the time spent dealing with it all. If new evidence appears later, it may be too late to submit. If the customer does the same thing elsewhere, and something tells me this isn’t this person’s first rodeo, then the next merchant gets to get suckered.

Nothing friendly about this. Besides perhaps Stripe effectively being friendly with the fraudsters here by not doing anything about it.

联系我们 contact @ memedata.com