How do you block a customer in Risk Manager who paid using afterpay or cashapp?

We've had a few of our afterpay customers commit fraud and I would like a way to block them from purchasing from us in the future. In the Block List you can only search for a transaction on a specific day using card # or note (apparently the note searches notes added by the customer so this parameter is virtually useless). Why aren't we able to search for and ban customers using their phone number, email address, IP address, etc? Why are we limited to using only the card #? 

715 Views
Message 1 of 3
Report
1 Solution
Square Champion

Solution

Hey there @clarajanenash.  Risk Manager is ENTIRELY based on credit/debit card numbers.  That is all it was designed to do, mostly because it interfaces with the national card issuers.  Those companies do not make phone number, email address, etc, available to anyone for such purposes.  As for IP address, that is tricky anymore.  We live in a time when nearly everyone who understands the internet either uses a VPN, or something like the iPhone/iPad Private Relay.  This means that IP addresses are constantly being masked and hidden and therefore completely unusable for the most part. At the very least, companies that have relied on IP addresses banning are now pretty much useless.

 

That being said, I agree with you that Square could give us the ability to make blacklists of email addresses and phone numbers that we don’t want to accept orders from.  This could be somewhat of a decent solution, but even that would not be foolproof.  Why, you might ask?  Well, let’s take the Apple Account feature called “Hide My Email.”  This allows customers to use alternate email addresses instead of our real ones so that we can keep our email addresses private and less hackable.  Sure, Apple is able to associate our alternate email addresses with our real one so that we can get emails to those alternate addresses.  But they never, under any circumstances, share this information with anyone, or the whole purpose of Hide My Email would be useless.  Also, people have multiple.e phone numbers these days and hackers and scam artists rarely use their own phone numbers, but use burner numbers, instead.  It’s pretty much the Wild West out there on the Word-Wide Web right now, which makes it very difficult to do what you think should be easy.

 

I do know that Square has been investigating new features for customer verification and such.  But I’ve not seen announcements that would indicate that these efforts are much beyond the research phase because as I pointed out it is highly complicated and may not even be possible right now.  Square is not alone here.  All card processors are dealing with this and maybe if they combine their efforts we might one day arrive at a solution.  But as long as customer privacy rightfully takes precedence over anything, it will not be any time soon, I’m afraid.

Chip A.
Square Expert & Innovator and member of the Square Champions group. (But NOT a Square employee, just a seller like you)

Was my post helpful? Take a moment to mark it as a solution. Marked solutions help other sellers find possible resolutions to similar problems. Also, if you find your solution elsewhere (say, through Support), it is helpful to come back to your post and tell us about it, then mark that as a Solution. Solutions are what this Community is all about!

View Solution >

686 Views
Message 2 of 3
Report
2 REPLIES 2
Square Champion

Solution

Hey there @clarajanenash.  Risk Manager is ENTIRELY based on credit/debit card numbers.  That is all it was designed to do, mostly because it interfaces with the national card issuers.  Those companies do not make phone number, email address, etc, available to anyone for such purposes.  As for IP address, that is tricky anymore.  We live in a time when nearly everyone who understands the internet either uses a VPN, or something like the iPhone/iPad Private Relay.  This means that IP addresses are constantly being masked and hidden and therefore completely unusable for the most part. At the very least, companies that have relied on IP addresses banning are now pretty much useless.

 

That being said, I agree with you that Square could give us the ability to make blacklists of email addresses and phone numbers that we don’t want to accept orders from.  This could be somewhat of a decent solution, but even that would not be foolproof.  Why, you might ask?  Well, let’s take the Apple Account feature called “Hide My Email.”  This allows customers to use alternate email addresses instead of our real ones so that we can keep our email addresses private and less hackable.  Sure, Apple is able to associate our alternate email addresses with our real one so that we can get emails to those alternate addresses.  But they never, under any circumstances, share this information with anyone, or the whole purpose of Hide My Email would be useless.  Also, people have multiple.e phone numbers these days and hackers and scam artists rarely use their own phone numbers, but use burner numbers, instead.  It’s pretty much the Wild West out there on the Word-Wide Web right now, which makes it very difficult to do what you think should be easy.

 

I do know that Square has been investigating new features for customer verification and such.  But I’ve not seen announcements that would indicate that these efforts are much beyond the research phase because as I pointed out it is highly complicated and may not even be possible right now.  Square is not alone here.  All card processors are dealing with this and maybe if they combine their efforts we might one day arrive at a solution.  But as long as customer privacy rightfully takes precedence over anything, it will not be any time soon, I’m afraid.

Chip A.
Square Expert & Innovator and member of the Square Champions group. (But NOT a Square employee, just a seller like you)

Was my post helpful? Take a moment to mark it as a solution. Marked solutions help other sellers find possible resolutions to similar problems. Also, if you find your solution elsewhere (say, through Support), it is helpful to come back to your post and tell us about it, then mark that as a Solution. Solutions are what this Community is all about!
687 Views
Message 2 of 3
Report
Square Community Moderator

Hi @clarajanenash! Thank you for your post!

 

Appreciate your input, @TheRealChipA!

 

Within Risk Manager there are three options to block customers. You can do so by using their email address, payment card, or by their IP address. 

 

Feel free to take a look at our Support Article here for more details on setting up a Block List. Let us know if you have any other questions!

Sammie_C
Community Moderator, US, Square
Sign in and click Mark as Best Answer if my reply answers your question :sparkles:
607 Views
Message 3 of 3
Report