HNHacker News
TopNewBestAskShowJobs

edwinwee

1,986 karma · joined September 3, 2015

edwinarbus@openai.com

https://twitter.com/edwinarbus

submissionscomments
edwinwee··on An embeddable and customizable fiat-to-crypto onramp
It's live! If you're in the US, you can try it out on the blog post: https://stripe.com/blog/crypto-onramp.

A bunch of beta users went live already too—you can see them here: https://twitter.com/gponcin/status/1598363240634888193.

edwinwee··on Stripe account suffered a card test
I work at Stripe. Could you email me at edwin@stripe.com and we can look into what went wrong here? (If a fraudster hits your account with card testing, we'd refund just the fraudulent test payments and your account status wouldn't be affected.) Additionally, do you have rate limiting or CAPTCHA in place? Either of those would mitigate further card testing. https://stripe.com/docs/disputes/prevention/card-testing
edwinwee··on Ask HN: Stripe holding funds for 120 days for no reason
We don’t touch reserved funds (and don’t earn interest off them either). The funds are saved for individual Stripe accounts and are only used to cover refunds and disputes from their customers.
edwinwee··on Ask HN: Stripe holding funds for 120 days for no reason
Sorry about this. Could you email me at edwin@stripe.com and I can dig in?
edwinwee··on Why doesn't Stripe use Stripe Billing?
Sorry, to be clearer—we are moving away from the old billing service my colleague mentioned and to a new one. Our new system shares similarites with the Stripe Connect + Stripe Billing flow I mention above (specifically https://stripe.com/docs/api/usage_records).
edwinwee··on Why doesn't Stripe use Stripe Billing?
First off, yes, Stripe uses Stripe to bill our own customers. In fact, for our larger customers who have negotiated complex pricing plans, we're currently migrating much of our manual billing to a system that's inspired by Stripe Billing.

Second, this article seems to miss the point of Stripe. It seems to want to build a platform, which is what Stripe Connect is designed for.

For example, charging a percentage fee is just one line (https://stripe.com/docs/api/application_fees):

` $application_fee_percent = 5`

Slack, Atlassian, and Notion have all built their B2B billing on top of Stripe. But we don't target just B2B or B2C ecommerce in case a business has multiple revenue streams (which many businesses are increasingly adding). In fact, we designed Billing so it can flex across any business model—per-seat, usage-based, tiered, or even graduated.

This is the point of Stripe. A single stack that flexes with your business as it grows and pricing that's public.

edwinwee··on Ask HN: Why do people come to HN for Stripe resolutions?
Stripe is built around processes and programs, not people. Behind every investigation that results from HN is a team of people. I’m just one person on that team—many of my teammates are equipped to respond here as well (and, in fact, do so today). We care a lot about the HN community which is why we’re always on here—HN isn’t meant to be an official support forum.

It might look like the number of absolute support issues landing on HN is increasing, but proportionally, the rate remains steady. We survey users after support interactions, and the satisfaction rate has been at ~85% for the past three years. For that remaining 15%, though, we have a couple projects in flight that hopefully will bring that number down.

But as a meta point, I’m not leaving Stripe anytime soon.

edwinwee··on Ask HN: Have you noticed an increase in the number of Stripe Disputes lately?
Funny timing. We hit send on the email batch at 16:43 UTC. Initial HN post looks to be from 16:44 UTC.
edwinwee··on Ask HN: Have you noticed an increase in the number of Stripe Disputes lately?
(Edwin from Stripe here.) These aren't actual disputes. A very small portion of Stripe businesses saw failed SEPA payments show up as disputes instead. (We've since fixed the bug and we're in touch directly with any impacted businesses on next steps.)
edwinwee··on Google Analytics is injected with Stripe.js when enabling Google Pay
(Edwin from Stripe here.) This is correct. I can only speak to how Stripe.js works but if a business chooses to accept Google Pay, we've limited it to loading in an iframe. (We don't load Google scripts on the business's domain.)
edwinwee··on Stripe has decided to nuke my entire business
Could you email me at edwin@stripe.com with a link to this post and we can dig into this?
edwinwee··on Stripe has decided to nuke my entire business
I can't proactively share specifics about a business, but in this case, they operate in a regulated space. The banks and card networks we work with require some extra checks due to the prevalance of scams in this space. A reviewer on our team flagged the business, and admittedly, we weren't very clear about what was required in order to continue working with us. After talking with OP today, we re-enabled the business.

1. Tomorrow we're regrouping with the team to see how we can improve our processes to prevent a similar case from happening again.

2. We're working on a new version of the Stripe Connect dashboard right now. There will be much more detail on which connected accounts are restricted and how to resolve the issues. We want to release it soon and I think it’ll provide platforms better visibility into the state of their accounts.

edwinwee··on Stripe has decided to nuke my entire business
Did you get this resolved? If not, could you forward to me at edwin@stripe.com?
edwinwee··on Stripe has decided to nuke my entire business
What issue are you seeing? Could you email me at edwin@stripe.com?
edwinwee··on Stripe has decided to nuke my entire business
I work at Stripe. Could you email me at edwin@stripe.com and I can dig into this?
edwinwee··on A small Stripe fraud story
No, we don't profit from fraud. First, just want to make clearer here that Radar is included for free in our standard pay-as-you-go pricing. The per-transaction fee is only applied if you have a custom pricing plan that "unbundles" our services by line item, or if you require our more advanced features (Radar for Fraud Teams).

On the dispute fee, banks charge varying amounts (they employ dispute investigators to read evidence, so it costs them to process). Some charge $10. Some charge $20. The average is $15, so we pass that $15 onto the Stripe user. (That way when accounting, the user doesn't have to factor in different fee amounts per bank—they only need to count the number of disputes, which is much easier.) We flex the average based on the country too—e.g., AU banks charge more, so the dispute fee is $20.

If a business wins the dispute, though, we refund the fee at our expense—the banks do not—because we feel it's the right thing to do.

edwinwee··on A small Stripe fraud story
(Edwin from Stripe here.) Stripe CVV verification can be turned on with a click or two in the Dashboard (https://dashboard.stripe.com/radar/rules). (The card issuer automatically also does their own verfication, and they can choose to decline or approve based on their own logic.) But the effectiveness really depends on the type of business. We have it off by default because we found it improves payment acceptance rates for businesses by 0.08% on average—with no tangible effect on fraud. Basically, Stripe Radar ML fraud detection would catch the fraudster anyway. So we thought businesses could use the small bump in revenue.
edwinwee··on A small Stripe fraud story
Would suggest using webhooks to customize and trigger alerts (https://stripe.com/docs/webhooks), or turning on payment notifications (https://support.stripe.com/questions/set-up-account-email-no...).

But the best way to prevent this is to absolutely make sure secret keys are kept secret! We try to scour for leaks in the wild—and notify the owner directly—but can’t see everything.

edwinwee··on A small Stripe fraud story
Appreciate it. Just connected with him.
edwinwee··on A small Stripe fraud story
Yes, this seems like some sort of card testing attempt. Glad most of the fraud was caught. Not sure if you’re the author, but I’d like to see how we could’ve helped better. Could you forward me your thread with support at edwin@stripe.com? Also, if you haven’t implemented them yet, I might recommend looking into CAPTCHA and rate limiting to help prevent future attempts.
edwinwee··on Stripe down for 4 hours (and counting) for all those with Stripe Tax enabled
Hm, we respond to emails, so I wonder what broke here. If you're still interested in narrowing down what happened to that transaction, could you email me at edwin@stripe.com?
edwinwee··on Stripe down for 4 hours (and counting) for all those with Stripe Tax enabled
Ah, sorry, may have missed it—could you forward and put your HN username in the subject?
edwinwee··on Stripe down for 4 hours (and counting) for all those with Stripe Tax enabled
$ stripe status with Stripe CLI (https://stripe.com/docs/cli/status) or RSS: https://status.stripe.com/current/atom.xml
edwinwee··on Stripe down for 4 hours (and counting) for all those with Stripe Tax enabled
It is not static text. Calcuated automatically.
edwinwee··on Stripe down for 4 hours (and counting) for all those with Stripe Tax enabled
Sorry for the issues here—could you email me at edwin@stripe.com?
edwinwee··on Stripe down for 4 hours (and counting) for all those with Stripe Tax enabled
(Think you mixed up some tweets here—you may have seen a recovery tweet about an unrelated issue. This is the canonical thread to follow: https://twitter.com/stripestatus/status/1561809071061155841.)
edwinwee··on Stripe down for 4 hours (and counting) for all those with Stripe Tax enabled
Edwin from Stripe here. Just to be totally clear, only a very small fraction of Stripe’s userbase is impacted by this. That said, Stripe being unavailable for even a single user is very concerning for us, and we’re fixing things as rapidly as we can. Follow this thread for updates: https://twitter.com/stripestatus/status/1561809071061155841.
edwinwee··on Show HN: Sale – A live cash register for your Stripe account
This is really cool!
edwinwee··on Ask HN: Stripe dashboard fails to display- could a Stripe dev help?
Weird, I can't seem to reproduce. Any Firefox extensions you have running? Mind disabling them and seeing if there's something that conflicts? Could you email me at edwin@stripe.com and I can help troubleshoot?
edwinwee··on Ask HN: High Biases in Stripe-Radar?
Allow Rules, if not implemented properly, could open a vector for fraud. That's why, for now, it's not enabled for newer businesses on Stripe—and we ask businesses to contact support to turn it on manually (https://support.stripe.com/). Would you be able to get in touch with us? (Please CC me, edwin@stripe.com.) We'd also like to look into why these payments were blocked in the first place (distance between IP address and card address is not the sole factor for risk scores; there are many factors) and make sure future legitimate payments are accepted.
← PreviousPage 2 of 12Next →