strange help ticket submitted

[paypal1352]

I had a very strange ticket submitted, it could be complete bullshit but i figured i'd post it here to see if theres any validity to this

"Hello,
I'm [Name Removed], a Cyber/Software Vulnerability Researcher.
I have seen that you're using stripe as a payment gateway; many of credits cards killers and CARDERS, are using your site as a merchant for testing the stolen cards, I have tried it myself, and it really easy to pay via Stripe, and check the cards balance with that merchant.
I recommend you to use a 3D Merchant, to reduce the fraud sales.
Thanks you"

I'm not sure how someone would check a cards balance using the ys stripe plugin, theoretically you could use any site with any payment provider to test whether the card works by making a purchase or transaction.

As to the claim that "carders are using my site as a merchant for testing stolen cards" is unlikely, i dont get the traffic or sales to back this claim up.

Any opinions ?

I hope the stripe plugin is secure and injection proof.

 

[paypal1352]

Also, would stripe not assume all responsibility over security, as i can't control who pays with what, even if some revenue is reversed, at least we're not shipping product out, so the loss is as minimal as it can be

this matter is definitely of concern

 

[pilot830]

Stripe doesn't allow file hosting sites anyway, i am not sure why people around here think that's the case. Email them yourself and find out

 

[paypal1352]

thats news to me, i'm just gonna keep using them till they ban me, this whole thing is a big problem at every turn, running a file host is not simple at all, no fault of ys implied of course they've been more than helpful