We also learned about how credit card thieves test credit cards. We saw hundreds of donation attempts. Stripe had us refund those that went threw, which costed us money in fees. Fortunately we were able to put some quick measures in place to stop them temporarily & then better measures for long term success.
We lowered our online donation limit. Above a certain amount it really is more ideal for a check or some other type of transaction. Though we've had a few people offer to just pay the 3% transaction fee on top of the multiple thousand dollar donation. For those we do a bit more manual process.
For a cost, Stripe also lets you put some additional rules on what type of payments you'll allow & how much info the person has to verify for the payment to be accepted.
Honestly a basic version of this should be free. I shouldn't have to pay extra to say I only accept cards with a CVC number & expiration filled out.
Other business obviously have MUCH higher refund rates (sneaky autobill businesses etc). For these loosing 5% on the refunds matters if they have a lot of refunds, so they'll be very tempted by no costs if you autobill and get caught. They'll just autorenew everyone, autosign up and then be VERY good about refunds to avoid chargebacks. Even if just 30% of customers don't catch a few months you end up with real money.
Of course, CUSTOMERS may hate these players, but stripe I guess is focused on what works for the businesses generating lots of refunds.
The reasonable thing to do is to ramp up the fees based on the number of refunds. You want to push away the crappy billers, but not hammer developers that have the occasional bad release.