Website 3DS Paranoia!
Website 3DS Paranoia!
Author
Discussion

anonymous-user

Original Poster:

85 months

Wednesday 14th May 2014
quotequote all
OK, had a half decent transaction come though that has passed 3DS on all counts (enrolled, auth & sig status). According to Verified by Visa liability shifts to the card issuer. I've spoken with our merchant business team who confirm this & also that the card holder address is the same as the delivery address we have.

So why am I paranoid? Because over the weekend they tried the same order, passed 3DS & was declined by the bank. Yesterday they tried again via Pay Pal, transaction went through but was flagged for review by Pay Pal. This was declined, reason was issuing bank.

So I've done everything I can & to all intents & purposes the transaction is now valid.

Am I covered? Would you ship the order?

jammy_basturd

29,778 posts

243 months

Wednesday 14th May 2014
quotequote all
Contact the customer, surely a 5 minute conversation with them will highlight whether it was fraudulent or not.

anonymous-user

Original Poster:

85 months

Wednesday 14th May 2014
quotequote all
Spoken to them, foreigner living in London. Tell me nothing TBH.

Zoon

7,307 posts

152 months

Wednesday 14th May 2014
quotequote all
We had a similar thing but the transaction failed to go through. Quite an expensive bit of kit going to a quite dodgy part of Birmingham, card registered in Thailand. Needless to say alarm bells were ringing.

Simpo Two

93,073 posts

296 months

Wednesday 14th May 2014
quotequote all
How about clicking 'refund' and asking for a bank transfer instead? Or just decline the deal; there is no law that says you have to sell them anything.

anonymous-user

Original Poster:

85 months

Thursday 15th May 2014
quotequote all
Simpo Two said:
How about clicking 'refund' and asking for a bank transfer instead? Or just decline the deal; there is no law that says you have to sell them anything.
That was my thinking. No, no law saying we have to sell but this week has been awful so could really do with it. The card is registered to an address in London, billing address & delivery address are the same. According to the 3DS data liability shifts to the card issuer but something tells me it's never that simple!!

Burrito

1,705 posts

251 months

Thursday 15th May 2014
quotequote all
The way I'm reading that, the customer has tried to order three times, is that right?
Once has been successfully auth'd through 3DS, another failed bank auth and the final failed paypal?

That rings alarm bells.

Is the order extraordinary? First time customer, next day delivery, high value, products that are often ordered fraudulently?

As a last ditch, final check, stick their postcode in here and see how it's rated, does it fit your customer demographic: http://www.checkmyfile.com/postcode-check/SW1A-2AA...

You could also have a look on streetview to check out the area.

anonymous-user

Original Poster:

85 months

Thursday 15th May 2014
quotequote all
Yep, they tried 3 times, (1) Paid via card passed 3DS declined by bank (2) Paid via Pay Pal, flagged for review, declined by bank (3)Paid via card, passed 3DS & accepted by bank. Liability shifts to card issuer according to the matrix table I have. No, it's not a high value item but a larger qty (45 of them). I'll take a look at that post code checker. Like I say my gut is cancel & refund. The fact that we've had a poor week & this would bump it up makes it tempting, especially since the liability does not appear to be with us. Not morally correct though IMO!!

jammy_basturd

29,778 posts

243 months

Thursday 15th May 2014
quotequote all
What was the timescale between the 1st, 2nd and 3rd orders? Guy might not have had any money in his bank account for the 1st and 2nd orders and then got paid or transferred some in?

OllieC

3,816 posts

245 months

Thursday 15th May 2014
quotequote all
Banks will often decline transactions on behalf of their cardholders if they think it looks dodgy / doesn't fit their spending pattern etc. (I don't know how this works in all honesty), sometimes we have customers who have to ring their bank to have the block taken off for example, a pattern of one or more failed attempts followed by a successful one, on the same card wouldn't necessarily worry me. lots of different cards for the same customer is another matter of course and would have me concerned.

if the billing address matches and is being used for delivery, and the 3ds check has gone through, you would not normally be liable for a chargeback based on fraudulent use of the card (not in our experience anyway !)


VEX

5,259 posts

277 months

Thursday 15th May 2014
quotequote all
Where are they in London.

I agree I they are a real customer, and they have difficulty ordering / paying and you can see that then call them, tell them your concerns and ask for a bank tx it is their first order.

ALL my customers pay up front for hardware with labour later and no one bats an eye at that request.

V.

anonymous-user

Original Poster:

85 months

Thursday 15th May 2014
quotequote all
jammy_basturd said:
What was the timescale between the 1st, 2nd and 3rd orders? Guy might not have had any money in his bank account for the 1st and 2nd orders and then got paid or transferred some in?
They first tried Saturday, then came back Monday then eventually paid Wednesday. They've tried two cards in total but the same card was also used on all 3 occasions.

anonymous-user

Original Poster:

85 months

Thursday 15th May 2014
quotequote all
OllieC said:
if the billing address matches and is being used for delivery, and the 3ds check has gone through, you would not normally be liable for a chargeback based on fraudulent use of the card (not in our experience anyway !)
Yeah that's what my look up matrix says smile

anonymous-user

Original Poster:

85 months

Thursday 15th May 2014
quotequote all
VEX said:
Where are they in London.

I agree I they are a real customer, and they have difficulty ordering / paying and you can see that then call them, tell them your concerns and ask for a bank tx it is their first order.

ALL my customers pay up front for hardware with labour later and no one bats an eye at that request.

V.
Marconi Road
E10 7

To be honest if it were fraud there are much easier things to buy & sell on.

Simpo Two

93,073 posts

296 months

Thursday 15th May 2014
quotequote all
Dave_ST220 said:
OllieC said:
if the billing address matches and is being used for delivery, and the 3ds check has gone through, you would not normally be liable for a chargeback based on fraudulent use of the card (not in our experience anyway !)
Yeah that's what my look up matrix says smile
The weasel word there is 'normally'. It only takes one link in the chain to say 'Actually no...' and you lose not gain.

I would say this - your natural senses developed by years in business seem eroded by the fact you are a bit light this month. The fact you are a bit short of work does not make the validity of the buyer any greater. At present it seems to be one of those 'How lucky do you feel?' situations as you cannot prove it 100%. Maybe it is 95% but are you prepared to gamble and lose?

anonymous-user

Original Poster:

85 months

Thursday 15th May 2014
quotequote all
Only I can make the decision wink It's annoying as 3DS is supposed to make this black & white. I'm awaiting a call back from the customer, if they don't call I think that says it all...

On a side note what do we think the fraud is here? Load up a card & flog the items elsewhere to get cash? Although can't you just get cash out on a credit card? (never used a credit card for cash, in fact never use the credit card I have, only got it as was advised it improved credit rating!1)

jammy_basturd

29,778 posts

243 months

Thursday 15th May 2014
quotequote all
I honestly don't think it'll be fraud. I think it's someone who couldn't afford to pay for the order until Wednesday.

If you're going to commit fraud you don't buy 45 of an item. You buy one (or a few) items so you can sell them on easily. Or you buy items on a card and ask for a refund in cash/to a different card, but that requires the person to go into a store.

anonymous-user

Original Poster:

85 months

Thursday 15th May 2014
quotequote all
It's a strange one. I've got another enquiry in today, if that one comes in (dealt with them before) then I'm going to risk this one smile The new deal would cover any losses for the "gut feel dodgy" one!

Just got to get this deal now!


Edited by Dave_ST220 on Thursday 15th May 10:54

Burrito

1,705 posts

251 months

Friday 16th May 2014
quotequote all
jammy_basturd said:
I honestly don't think it'll be fraud. I think it's someone who couldn't afford to pay for the order until Wednesday.

If you're going to commit fraud you don't buy 45 of an item. You buy one (or a few) items so you can sell them on easily. Or you buy items on a card and ask for a refund in cash/to a different card, but that requires the person to go into a store.
The fact that they tried alternative payments until they got one to work might also mean the other payment methods had been marked as compromised already. Was the card used the same for both attempts?

WRT not buying 45 of something if you're committing fraud, that's exactly what they do. In my experience, multiple items that are easy to sell either on eBay or local black market.

The fraudsters usually do not have the card or PIN so they cannot simply go to a cash point.

Dave - how did it go?

anonymous-user

Original Poster:

85 months

Friday 16th May 2014
quotequote all
Well we spoke to our merchant account provider who then emailed me so I have it in writing saying we are covered. The goods went yesterday via UPS so should be there today. The mark up is great so the loss would be minimal in any case. Sure will be interesting to see how this pans out!!

ETA:- They only used two cards in total, one never went through (passed 3DS though), the other did later in the week. I would think (hope!) that the bank would have flagged the card from the previous attempts if they were concerned at all??


Edited by Dave_ST220 on Friday 16th May 10:42