Hacker News Reader

Thanks, I didn't see that bit.

> There's a limit to what kind of checks you can feasibly do.

Actually, this one would've been easy to catch - we know which states have which zip codes. The company I work for checks this in web forms, but I don't find that such validation is common.

> By the sounds of it, requiring a billing address in the United States seems reasonable.

Problem is, it isn't. US citizens living abroad have every right to donate.

View on HN

Actually, I think that zip code is valid :) according to a quick Google search at least.

But I admit I hadn't thought about citizens living abroad; that makes it more understandable there would be these issues. It's certainly a case of (perhaps) incompetence over malice anyway.

Edit: my mistake, I missed that he claimed the zip was in Arkansas.

It's a valid zip, but not for the state of Arkansas. It says he entered "Arkansas, 12345", which is something that could be automatically caught.

You would need some sort of photo of their passport to verify citizenship for a foreign national. You would have to securely store thousands of these images for reporting purposes. It would be a legal and technological impediment and extra cost involving a large amount of effort for very little payoff. This was easier to limit with the online store. They just didn't provide international shipping options.

Reply on news.ycombinator.com