I run a Squarespace store for one of my clients. The client has a local market. We've been getting dozens of people that are buying our gift cards from out of the state, only to have the actual person call us and tell us they never made that purchase.
I contacted Stripe and they gave me a few things to implement on Squarespace.
1. Captcha: Card testers often use automated scripts that can be blocked using a captcha.
2. Rate limits: In some cases, you can stop card testing by adding rate limits. Tailor these rate limits to stop the specific kind of card testing you’re experiencing
3. Require login or session validation: Card testing can often be prevented by requiring login or session validation when performing certain actions, such as creating an account or making a payment.
4. Detecting and preventing unusual behaviour: As soon as you’ve identified card testing activity, you can compare it to typical legitimate traffic, then build rules or filters that limit or prevent only the card testing activity.
5. Radar: If card testers are making payments with your integration you might be able to use custom Radar rules to mitigate the fraudulent activity."
I asked Squarespace about these. They said Captcha isn't possible. We already have customer accounts. Stripe's Radar costs extra.
Has anyone else encountered this? Is there any way to combat this without having to manually refund each one?
Same issue here. Order confirmation emails from no-reply@squarespace.info aren't reaching all of the customers.
