Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

By the way, the last time I checked using 3ds means that it's "impossible that the transaction was fraudulent" and thus you can't cancel it


Yep, that's why it caught on by shop despite being a friction.


I've heard it presented more as that the merchant isn't on the hook for a chargeback because they did the "best practice" in terms of preventing it.


Yikes, what happens if you've had your devices/credentials stolen? Are you held liable for the transaction without recourse?


What actually happens is with 3DS: a merchant gets liability shift. Liability resides with the issuer then. Whether you as a customer can be held liable for damages depends on your jurisdiction and when you report your devices / credentials stolen.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: