Ask HN: Looking for an Alternative to Stripe | Hacker News Reader

Ask HN: Looking for an Alternative to Stripe

Hi.

We're using Stripe and we got hit by a bunch of friendly fraud where we see an easy solution how to prevent this from happening - blocking a specific bank. But Stripe does not give you the BIN of the cards, and will not allow you to block by card issuer name.

BIN databases cost like $2.500 per year and I'm not sure how accurate they are. Why on Earth Stripe wouldn't let us see the BINs/block by issuer names is beyond me.

So I'm looking for an alternative that:

1) Supports 3DS

2) Lets you block by issuer name

3) Shows you the BIN (not really needed if #2 is available, but nice to have an shows that the processor cares about the merchant)

Is there a good option? Thanks

View on HN

You can block by issuer / BIN with Stripe Radar: https://stripe.com/docs/radar/lists#default-lists.

You can also request to receive BIN per transaction if you write into support (https://support.stripe.com/contact/login). This isn't allowed by default because Stripe needs to make sure the setup and use case is secure to ensure PCI compliance.

The BIN is not covered by PCI. There's no reason they can't provide the BIN for every card.

Stripe support specifically told us they don't provide BINs and they don't make exceptions.

Last time I worked with Carts, I remember Braintree being good about this

https://developer.paypal.com/braintree/articles/control-pane...

We use Checkout.com and find them really helpful.

Their Risk system allows you to block by BIN, which we do, and they provide you full details of the payment details associated with each authorisation.

Thanks, will try that. Is there an option of blocking by the name of the issuing bank? The bank that I'm trying to block has a lot of BINs that change constantly.

Why don't you check the BIN yourself before sending the request to Stripe?

I can assist you with that: danielgomjur/at/gmail/dot/com

Cause I redirect the customer to Stripe hosted page. I'd really prefer not to go into the whole PCI DSS thing for this. Also, why should I jump through hoops when it's Stripe that chooses to make life harder for me? I'd rather find a better alternative.

It would be illegal to do this in the US or Europe without the business being PCI compliant first.

You might want to offer up the country's laws you are familiar with before making offers like this.

Can I know did you find any solution from this?

What country are you in? I can help you get an account that works in Canada,USA, and some other countries.

USA. What do you mean by "get an account"?

Setup a merchant account and a gateway that suits your needs for fraud detection and 3DS support. Depending on volume it will be cheaper then Strip.

Sounds totally legit. Not at all a scam.

Edit: /s because some people need all the help they can get.

You have no idea what you are talking about and stop telling people everything is scam because you have no idea what you are talking about.

No, not "everything" is a scam.

Just random dudes posting comments "I can get you a [merchant] account" sounds extremely scam-y.

It's like a guy at a train station opening a coat and offering you a "Rolex".

Adyen

https://www.adyen.com/pricing

Paddle

Reply on news.ycombinator.com