HN Explorer

Ask HN: Looking for an Alternative to Stripe

29 points by fuckgoogleplay ↗ HN
Hi.

We're using Stripe and we got hit by a bunch of friendly fraud where we see an easy solution how to prevent this from happening - blocking a specific bank. But Stripe does not give you the BIN of the cards, and will not allow you to block by card issuer name.

BIN databases cost like $2.500 per year and I'm not sure how accurate they are. Why on Earth Stripe wouldn't let us see the BINs/block by issuer names is beyond me.

So I'm looking for an alternative that:

1) Supports 3DS

2) Lets you block by issuer name

3) Shows you the BIN (not really needed if #2 is available, but nice to have an shows that the processor cares about the merchant)

Is there a good option? Thanks

18 comments

[ 1.8 ms ] story [ 51.1 ms ] thread
william-evans
We use Checkout.com and find them really helpful.

Their Risk system allows you to block by BIN, which we do, and they provide you full details of the payment details associated with each authorisation.

fuckgoogleplay
Thanks, will try that. Is there an option of blocking by the name of the issuing bank? The bank that I'm trying to block has a lot of BINs that change constantly.
thedangler
What country are you in? I can help you get an account that works in Canada,USA, and some other countries.
fuckgoogleplay
USA. What do you mean by "get an account"?
thedangler
Setup a merchant account and a gateway that suits your needs for fraud detection and 3DS support. Depending on volume it will be cheaper then Strip.
stephenr
Sounds totally legit. Not at all a scam.

Edit: /s because some people need all the help they can get.

thedangler
You have no idea what you are talking about and stop telling people everything is scam because you have no idea what you are talking about.
stephenr
No, not "everything" is a scam.

Just random dudes posting comments "I can get you a [merchant] account" sounds extremely scam-y.

It's like a guy at a train station opening a coat and offering you a "Rolex".

gomezjdaniel
Why don't you check the BIN yourself before sending the request to Stripe?

I can assist you with that: danielgomjur/at/gmail/dot/com

fuckgoogleplay
Cause I redirect the customer to Stripe hosted page. I'd really prefer not to go into the whole PCI DSS thing for this. Also, why should I jump through hoops when it's Stripe that chooses to make life harder for me? I'd rather find a better alternative.
ratg13
It would be illegal to do this in the US or Europe without the business being PCI compliant first.

You might want to offer up the country's laws you are familiar with before making offers like this.

edwinwee
You can block by issuer / BIN with Stripe Radar: https://stripe.com/docs/radar/lists#default-lists.

You can also request to receive BIN per transaction if you write into support (https://support.stripe.com/contact/login). This isn't allowed by default because Stripe needs to make sure the setup and use case is secure to ensure PCI compliance.

BehindTheMath
The BIN is not covered by PCI. There's no reason they can't provide the BIN for every card.
fuckgoogleplay
Stripe support specifically told us they don't provide BINs and they don't make exceptions.
eihsan94
Can I know did you find any solution from this?