Jump to content

Gift card scam/testing

Recommended Posts

I run a Squarespace store for one of my clients. The client has a local market. We've been getting dozens of people that are buying our gift cards from out of the state, only to have the actual person call us and tell us they never made that purchase.
I contacted Stripe and they gave me a few things to implement on Squarespace.
1. Captcha: Card testers often use automated scripts that can be blocked using a captcha.
2. Rate limits: In some cases, you can stop card testing by adding rate limits. Tailor these rate limits to stop the specific kind of card testing you’re experiencing
3. Require login or session validation: Card testing can often be prevented by requiring login or session validation when performing certain actions, such as creating an account or making a payment.
4. Detecting and preventing unusual behaviour: As soon as you’ve identified card testing activity, you can compare it to typical legitimate traffic, then build rules or filters that limit or prevent only the card testing activity.
5. Radar: If card testers are making payments with your integration you might be able to use custom Radar rules to mitigate the fraudulent activity."
I asked Squarespace about these. They said Captcha isn't possible. We already have customer accounts. Stripe's Radar costs extra.
Has anyone else encountered this? Is there any way to combat this without having to manually refund each one?
Link to comment
On 3/23/2023 at 6:52 PM, devinawalk said:
I contacted Stripe and they gave me a few things to implement on Squarespace

Sadly it is not possible to implement these additional security and anti-fraud measures on Squarespace. For example, Stripe Radar is not supported by the Stripe API that Squarespace are using, so no transactions will be protected by this service. I've been asking for Radar support for the last eleven months, but this isn't on the roadmap.

Regarding potentially fraudulent transactions, I recommend that you follow up on these and refund them to avoid potential dispute fees as a result of chargebacks. I strongly recommend that you report potential fraud directly to Squarespace Customer Care - as early as possible - so they can work with Stripe to improve fraud detection on Squarespace. If you are having difficulties contacting Squarespace, please read how to contact Squarespace.

Did this help? Please give feedback by clicking an icon below  ⬇️

Edited by paul2009

About me: I'm Paul. A SQSP User for 18 yrs, I've been a Circle Leader since 2017. I value honesty, transparency, diversity and good design ♥.
Work: Founder of SF.DIGITAL, providing high quality original extensions to supercharge your Squarespace website. 
Content: Views and opinions are my own. Links in my posts may refer to my own SF.DIGITAL products or may be affiliate links.
Forum advice is free. You can thank me by clicking one of the feedback emojis below. Coffee fuels my work.

Book paid help with domains: Connect a GoDaddy domain. Connect a Squarespace Domain. Domain assistance

Link to comment

Create an account or sign in to comment

You need to be a member in order to leave a comment

  • Create New...

Squarespace Webinars

Free online sessions where you’ll learn the basics and refine your Squarespace skills.

Hire a Designer

Stand out online with the help of an experienced designer or developer.