• Resolved Sahib Khan

    (@sahibkhaan)


    Hello,
    I am getting fraud transaction from some days. I am using WooCommerce Stripe Payment Gateway plugin on my website.

    Basically our flow is we create an woocommerce order from custom code inside our custom theme.

    After creating an order with pending status, we send user to order-pay screen. Their the user will able to see the payment methods used on that website like Stripe Credit Card and PayPal.

    Yesterday I have talked to Stripe support team and they told me this:
    “It looks like the card testers are obtaining client secrets for Setup and/or Payment Intents, then confirming the Intent with stolen card information. This confirms whether the card is valid, even without a payment.”

    Here I have done 2 testing :
    1.) from using other WP Theme : Storefront on Staging
    I can see the payment intent inside Developer tools -> Network tab [ https://prnt.sc/EpZrecvRyD_n ]

    2.) with my custom theme on Production
    here also I can see the payment intent inside Developer tools -> Network tab [ https://prnt.sc/VCDplEv6rmY1 ]

      So here I want to tell that in both environments I can see the client_secret is getting revealed. So now what to do in this situation to stop fraud transactions. Please help me ASAP.

      Thanks

    Viewing 2 replies - 1 through 2 (of 2 total)
    • Plugin Support Zubair Zahid (woo-hc)

      (@doublezed2)

      Hello Sahib Khan

      Thank you for contacting Woo support.

      Could you please create a ticket via your Woo.com account?
      This forum is intended for support related general configuration and other plugin functionality.
      Since your case is about fraud and possible security issues, it would be best to get support via Woo.com.

      Let me know if you have any questions. ??

      Best regards.

      Thread Starter Sahib Khan

      (@sahibkhaan)

      Okay, Thanks

    Viewing 2 replies - 1 through 2 (of 2 total)
    • You must be logged in to reply to this topic.