$1 payments to me

I keep getting phony $1 payments from phony clients into my account.  Today I got 1, and yesterday 2 of them. I have a link on my website to Square for processing. These people actually charge to a credit card $1 transactions, and the money shows up in my account. I'm a consultant and don't sell anything but my time. I wouldn't even charge $1.

 

What I assume is going on, is that crooks have stolen credit cards, and they are checking to see if they are valid. If they pay me, then the credit cards work. Somehow, they must get more than an extra dollar for confirmed credit cards. This is just my guess.

 

Square wasn't helpful. Shouldn't there be some fairly automated way to share this information with some fraud authorities? Is this normal?

4,804 Views
Message 1 of 15
Report
14 REPLIES 14
Square Champion

Hi @steveshank.  While you are probably right in your suspicion that this will eventually lead to card fraud, it hasn’t actually done that yet.  At this point, people are giving you money.  Yes it may be disputed by the actual card holder, eventually, but for now there is not a lot you can do about it except wait for the dispute that will probably happen.  Having said that…..

 

Square has a thing called Risk Manager (online dashboard > Payments > Risk Manager) where you can do all sorts of things to protect yourself from fraud.  You can, if you want, go there, then go to Block List, click “Add to list” and search for the suspected cards using the last four digits as shown in you Transactions list.  This will allow you to block that card from future attempts which will, in essence, raise red flags if they try to use that card again for any other transaction with you.

 

I hope that helps.

Chip A.
Square Expert & Innovator and member of the Square Champions group. (But NOT a Square employee, just a seller like you)

Was my post helpful? Take a moment to mark it as a solution. Marked solutions help other sellers find possible resolutions to similar problems. Also, if you find your solution elsewhere (say, through Support), it is helpful to come back to your post and tell us about it, then mark that as a Solution. Solutions are what this Community is all about!
4,780 Views
Message 2 of 15
Report

Thanks Chip. I'm not worried about challenges or fraud to me. I use a 32 character completely random password and an authenticator app. I'm seeking an option like, "Don't accept any transaction below $10".

 

I'm not rich, but keeping track of transactions that cost $1.00 and resulted in $0.67 is worth more than the 67 cents I get make for it.

 

 

4,774 Views
Message 3 of 15
Report
Square Champion

@steveshank understood.  Risk Manager is very feature rich and it does allow you to reject payments whose amounts are less than or greater than a given amount.  There are other payment conditions as well, things like Risk evaluations AVS, card origin, card number of purchases per day.  

 

Basically you can use it to automatically flag certain types of transactions or certain transactions that do not meet criteria you set.  Then each day you can review the list of flagged transactions and accept or reject them as you wish.

 

I think this will help, but it will take some time reviewing the various Risk Manager feature and such in order to figure out what works best for you.

 

Let me know if you have any other questions.

Chip A.
Square Expert & Innovator and member of the Square Champions group. (But NOT a Square employee, just a seller like you)

Was my post helpful? Take a moment to mark it as a solution. Marked solutions help other sellers find possible resolutions to similar problems. Also, if you find your solution elsewhere (say, through Support), it is helpful to come back to your post and tell us about it, then mark that as a Solution. Solutions are what this Community is all about!
4,769 Views
Message 4 of 15
Report

I got a chance to check out Risk Manager. Thanks for the tip. However, I failed to figure it out in a useful way. First, their video says it has a 90-day free trial subsequently we'll be charged per transaction. Their FAQ says it is free, but might in the future add a premium version. Apparently, they can't figure it out themselves.

 

Next, I tried to create a simple rule to simply reject any payment below $5. That would stop crooks from testing stolen cards, and I never send out bills for less than $5, so my clients won't be affected. It wouldn't allow a decline option and I don't want to be notified and have action required, and it wouldn't allow me to set up a 1 rule test. They required a 2nd rule. There isn't one I could think of, and apparently their rules are AND rules so anything I added would let transactions through.

 

They did list transactions I had or that they blocked from someone, and it lists dozens of $1 transactions every day that get declined. Apparently, those cards aren't good.

 

I've spent too much time on this.

4,755 Views
Message 5 of 15
Report
Square Champion

@steveshank Thanks for that thorough update.  It looks like you definitely did your “homework,” as it were.  Ha.  Anyway, though you have (in your own words) “spent too much time on this,” I’ll add a couple of observations.

 

First, I remember sometime reading that Risk Manager is now free and that there are no plans to monetize it.  🤞

 

Second, though it is a little maddening I see that rejections based solely on amount do not seem to be allowed.  This makes some sense, I guess.  

 

You do have another option other than decline or trigger an alert.  You can set a rule to invoke 3D Secure (3DS).  This is an industry standardized way to authenticate electronic card transactions that will require that the customer be required to further verify their identity and authorization to use the card.  This standard even goes as far as to redirect customers to the issuing bank’s website.  If you set it up this way, the hassle is usually enough to stop fraudsters from going any further, thereby “blocking” the transaction from completing.  And, if the issuing bank gets involved, that usually raises red flags with them that there might be a stolen card.

 

I just wanted to put that out there.

Chip A.
Square Expert & Innovator and member of the Square Champions group. (But NOT a Square employee, just a seller like you)

Was my post helpful? Take a moment to mark it as a solution. Marked solutions help other sellers find possible resolutions to similar problems. Also, if you find your solution elsewhere (say, through Support), it is helpful to come back to your post and tell us about it, then mark that as a Solution. Solutions are what this Community is all about!
4,752 Views
Message 6 of 15
Report

It's happening to me, then the fake client disputes the charge and now square completely disabled my account and wants 3 months worth of bank statements ID, business creditionals etc- they won't tell me why but it has to be the 1.00 payment made on line. I had a second 1.00 payment, I'm sure whomever will dispute and really cause me issues! Square is not helpful at all, will not let me talk to the department that handles the account suspension. If I had lead time I would just leave square, but I've had several clients try to pay today and I can't take their money. With no notice on my account being disabled I need it fixed fast. The 1.00 payments come from a fake @example email address. Square should see the online payor is the fraudster not me!!! Reporting to FTC!

4,630 Views
Message 7 of 15
Report
Square Community Moderator

Hi @bbcpa,

I'm sorry to hear that your business has been targeted in this way.

After reviewing your Square account from our end, I noticed that you've already reached out to our Support Team regarding this issue to have the temporary hold lifted on your Square transfers. This was going to be my suggestion as well, as we're unable to delve into the details via the Seller Community platform.

Additionally, I see that we've discussed setting up Risk Manager on your account. If you have any further questions about using Risk Manager, please feel free to reach out to our Support Team at 1-855-700-6000 between 6 am - 6 pm, Pacific Time, Monday - Friday.

We're here to assist you with any concerns you may have and ensure that you're able to process card payments whenever you need to.

Laurie
Community Moderator, Australia, Square
Sign in and click Mark as Best Answer if my reply answers your question.
4,618 Views
Message 8 of 15
Report

Thank you for the reply, Laurie.

 

However, I've already discovered twice that your support is useless. Regarding your risk manager, it is also useless because it has been disabled, either intentionally or not, I don't know. Here are the things I'd need before wasting my time again with it. Honestly, my best explanation is that Square makes money from millions of these "valid credit card" checks and doesn't want the practice stopped, regardless of the harm it does to consumers.

 

  1. Is it free, or will I be charged after a free period? Your instructions say I'll be charged later, but some people here say it is free.
  2. Can I enter a single criterion (if so, how), to simply refuse all payments below, say $15? If the crooks had to pay $15 instead of $1 to test a credit card, then they'd stop testing. If not, I could go to $20. When I tried this, it stopped me. First because it would not refuse payments for a low amount. Second because actions for a low amount required a second criterion.

Just post the clear instructions about how to set up the risk manager (for free or what the cost is), to refuse low payments. I'm a consultant. I don't bill <$15, ever. Don't millions of accountants and lawyers and consultants have a minimum of $15 minutes, so they can't charge that little.

 

If that won't work, then how do you suggest stopping a site from being used to test for valid credit cards with fake $1 payments? Do you have a way to do it?

4,605 Views
Message 9 of 15
Report
Alumni

Hello @steveshank and @bbcpa 👋

 

Risk Manager is free to use at this time and does not charge 6¢ per transaction.

On our help articles, there is a note under the embedded video clarifying that the tool is now free. 

 

This article has great instructions on how to navigate Risk Manager.

 

At this time, applying only a minimum amount rule is not supported. You can learn more about how to create rules here

 

Thank you. 

Frances
Community Moderator, Square
Sign in and click Mark as Best Answer if my reply answers your question.
4,579 Views
Message 10 of 15
Report

Miscreants are testing stolen credit cards with phony $1 purchases. If they go through, then they know they can really rip off the credit card company or the victim. Does Square provide any way we can stop that? I'd rather not be helping these crooks screw victims of credit card theft. It is a simple question. How do I stop those miscreants from using my Square account to cheat people who've lost their credit card information? I thought of a simple way that would work for me, just don't accept payments less than $10 or $15. You have a "reject payment" option and a filter tool. But you've removed the reject transaction option from the small payment filter. Why?

 

4,572 Views
Message 11 of 15
Report
Square Community Moderator

I can appreciate your frustration here, @steveshank. While I can't speak to any changes to Risk Rule conditions, I’d be happy to shed some light on the existing features within Risk Manager that could be useful to you.

To block payments based on the amount, the Risk Manager rule indeed requires two conditions. For this situation, you might consider pairing the payment amount condition with a 'Risk evaluation - is moderate' condition.

You also have the ability to set a rule requesting 3D Secure (3DS) for payments under a set amount, like your suggested $15 limit. This rule functions independently, without the need for a second condition.


With 3DS enabled, any individual attempting a transaction under your $15 limit may have to verify their identity for online payments. If a transaction meets the criteria to trigger 3D Secure, one of the following actions will be activated:

  1. A request for a one-time passcode sent via text message (SMS) or email.
  2. A request for a biometric scan (fingerprint or face ID).
  3. A redirection to the card-issuing bank’s website.


You can learn more about 3D Secure here.

Please do let us know if you have any additional questions.

4,565 Views
Message 12 of 15
Report

Thanks for the reply. The next time I have a couple of hours to possibly waste pursuing the unicorn, I'll review your message and mess around with your suggestions, hoping to find a way to help not contribute to credit card theft. I did copy your reply to my notes app, so I can pursue your suggestions if some time opens up to use, gambling on the possibility that your suggestions will produce something useful, without incurring unforeseen problems.

4,558 Views
Message 13 of 15
Report

I was also unable to block by single criteria. I could definitely get by with a $15 or $20  minimum if it would let me  block by amount only.

4,598 Views
Message 14 of 15
Report

good it and i like it

3,893 Views
Message 15 of 15
Report