Payment processor Stripe faces criticism for allegedly making it easy for customers to exploit its chargeback dispute system. The platform's dispute resolution process reportedly favors fraudulent claims filed as legitimate customer complaints.
According to recent analysis, Stripe's chargeback and dispute handling mechanisms allow customers to commit "friendly fraud"—when buyers falsely claim unauthorized transactions or non-delivery to reverse charges.
The issue stems from how Stripe processes disputes. Merchants report that customers can file claims without substantial evidence, and Stripe frequently rules in their favor regardless of documentation provided. This differs from competitors' stricter verification processes.
Friendly fraud costs e-commerce businesses billions annually. Merchants using Stripe say they lose products or services while customers retain both goods and refunds, with limited recourse.
The criticism gained traction on Hacker News, accumulating 179 points and 121 comments from developers and business owners sharing similar experiences. Some report losing significant revenue to repeated fraudulent claims from the same users.
Strike has not publicly responded to these allegations. The findings highlight broader friction in payment processing, where platform policies must balance consumer protection with merchant security.
U.S. federal prosecutors have unsealed charges against three Russian nationals accused of operating a bulletproof hosting service that supported ransomware gangs responsible for over $62 million in damages worldwide.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that attackers are actively exploiting three vulnerabilities in Internet-exposed on-premises SharePoint Server instances. Organizations running affected versions must patch immediately.
Tailscale disclosed a critical vulnerability in its SSH implementation that allowed attackers to gain root access through insecure argument handling. The flaw has been patched in recent versions.
A new study found that social media platforms referred over 5.7 million visits to nonconsensual deepfake pornography sites between December 2025 and March 2026, with YouTube and X accounting for the majority of traffic.