• Resolved sasquatchms

    (@sasquatchms)


    Hello again, I was going through Stripe’s documentation on fraud prevention and found this: https://support.stripe.com/questions/avoiding-fraud-and-disputes

    Specifically:

    “To fully utilize our fraud detection tools, Stripe users should:

    1 – When creating charges, send customers’ names and e-mail addresses. These can be captured directly from a form with Stripe.js or included in Customer-creation API calls. If you don’t use Stripe.js or Customer objects, you can include e-mails in the description field on charges.”

    In the next version of your plugin can you include the customer e-mail address in the description field of the charges so Stripe can use that data for anti-fraud purposes? Maybe go a step further and create a Stripe customer record for each transaction using customer-creation API calls?

    I also noticed the customer name is being passed with a dash (“-“) between first and last name. For example John-Doe instead of John Doe. I am concerned this may cause issues with Stripe’s anti-fraud methods, can you verify and fix if needed?

    Thanks, keep up the good work!!

    https://www.ads-software.com/plugins/stripe-woocommerce-addon/

Viewing 15 replies - 1 through 15 (of 30 total)
  • Plugin Author nazrulhassanmca

    (@nazrulhassanmca)

    Regarding “-” that is a simple fix on line no 301 of current plugin version 1.0.1 i just need to remove that or change

    $wc_order->billing_first_name.’-‘.$wc_order->billing_last_name,
    to
    $wc_order->billing_first_name.’ ‘.$wc_order->billing_last_name,

    regarding Fraud detection , i can pass customer email in metadata ?

    just to think on Do i need to create customer for each Place order? even its a a repeat customer? or combine it with logic of stored cards

    But stored cards logic works for logged in users only

    so question is do i need to create customer for each place order ?

    Thread Starter sasquatchms

    (@sasquatchms)

    Hm, I am not sure. I am just going off what Stripe says in their documentation.

    Also, can you pass the shipping address as well as the billing address? This is another piece of info they will use (if passed) for anti-fraud purposes.

    https://support.stripe.com/questions/avoiding-fraud-and-disputes

    “Generally, Stripe cannot see the shipping address customers provide and shipping information is not necessary to successfully accept a payment. However, you can improve Stripe’s fraud detection by sending the shipping address when creating a charge.”

    https://stripe.com/docs/api#metadata

    Shipping information
    Store shipping status and tracking numbers on a charge to easily track the status of an order.

    Plugin Author nazrulhassanmca

    (@nazrulhassanmca)

    When you click on Logs > POST /v1/charges you will get this i have already passed that to stripe https://awesomescreenshot.com/07a4xt6a2e ( link expires in a month)

    Thread Starter sasquatchms

    (@sasquatchms)

    Oh, cool thanks!

    I think if creating a customer record is a pain in the butt, adding cutomer email to the description looks to be the next best thing, according to the documentation I linked. Not sure about placing it in the metadata.

    I noticed you were working on subscriptions, which likely requires a customer record anyway, so maybe “kill two bird with one stone” there.

    Plugin Author nazrulhassanmca

    (@nazrulhassanmca)

    Regarding Billing

    Click on Logs > POST /v1/tokens https://awesomescreenshot.com/0634xt6t19 ( Link expires in a month)

    you get billing address – https://awesomescreenshot.com/0334xt6oa1 ( Link expires in a month)

    click on Logs > POST /v1/charges https://awesomescreenshot.com/0634xt6t19 ( Link expires in a month)

    You will get shipping address https://awesomescreenshot.com/07a4xt6a2e ( Link expires in a month)

    Thread Starter sasquatchms

    (@sasquatchms)

    Confirmed, I can see that info after going into the POST /v1/charges.

    Will you look into adding cutomer email where required to pass to Stripe for anti-fraud scan?

    Thanks…chargebacks are no fun, your efforts benefit all of us!

    Plugin Author nazrulhassanmca

    (@nazrulhassanmca)

    See i dont have problem adding this is what i see in their documentation so i need to find where should be it most suitable

    description optional, default is null

    An arbitrary string which you can attach to a charge object. It is displayed when in the web interface alongside the charge. Note that if you use Stripe to send automatic email receipts to your customers, your receipt emails will include the description of the charge(s) that they are describing.

    also plz chek this https://stripe.com/docs/api#create_charge

    Description goes in order receipt of customer in fact seems

    Thread Starter sasquatchms

    (@sasquatchms)

    Yes this seems like conflicting information.

    Support article says: “When creating charges, send customers’ names and e-mail addresses…If you don’t use Stripe.js or Customer objects, you can include e-mails in the description field on charges.” via https://support.stripe.com/questions/avoiding-fraud-and-disputes

    Documentation says “If you have Stripe email receipts enabled, the description on a charge or invoice item will appear on the email receipt that is sent to your customer.” via https://stripe.com/docs/api#metadata

    For what it’s worth, I do not have customer email receipts in use (WooCommerce already does that) and I do not mind if the email address is in the Description. That is jut my own use-case and not sure what best-practice is. Maybe someone on Stripe IRC can give a definitive answer.

    Plugin Author nazrulhassanmca

    (@nazrulhassanmca)

    “you can include e-mails in the description field on charges” so i can include in meta data as well basically for tracking i believe

    Plugin Author nazrulhassanmca

    (@nazrulhassanmca)

    If you can code yourself you need to add one line to plugin file after line no 323 on ver 1.0.1 and you will get that as https://awesomescreenshot.com/0bc4xtb5b1 ( link expires in month)

    ‘Billing Email’ => $wc_order->billing_email,

    I believe i can resolve this topic hopefully

    Thread Starter sasquatchms

    (@sasquatchms)

    Will you be adding this to the next update or will I need to re-add this code each time? Thanks!

    Plugin Author nazrulhassanmca

    (@nazrulhassanmca)

    No this was a miss from my side so i am updating it to wordpress repository it will not show plugin update as its a minor change but all future release will have it by default

    Thread Starter sasquatchms

    (@sasquatchms)

    Thanks much for all your efforts!

    Plugin Author nazrulhassanmca

    (@nazrulhassanmca)

    I look on other plugins as well ??

    https://www.ads-software.com/plugins/authorizenet-woocommerce-addon/
    https://www.ads-software.com/plugins/paypalpro-woocommerce-addon/ ( Has very less users when users increase i will add features )

    Thread Starter sasquatchms

    (@sasquatchms)

    FYI I tested and it works. Cheers!

Viewing 15 replies - 1 through 15 (of 30 total)
  • The topic ‘Requested features for improved fraud protection’ is closed to new replies.