#rstupek

1 messages · Page 1 of 1 (latest)

deep ridgeBOT
dreamy echo
#

Not sure I have seen that field before. Can you show me where you are seeing it?

#

Also do you have the ID for this payment intent? I don't know when exactly we would start and stop timing the user's checkout

hollow fossil
#

in a /confirm request (I'm guessing the js api on page) the request includes time_on_page

#

pi_3OBXD72foX7GzaKa06UJS9Kz

dreamy echo
#

Thanks for the ID, checking in to it.

#

Ah did you see the confirm request in your dashboard?

hollow fossil
#

yes I'm lookingin a connected account dashboard at the events

dreamy echo
#

And is there a specific aspect of time_on_page that you are trying to figure out? Unfortunately I don't think you can access this field via the API, I am not seeing it in docs

hollow fossil
#

trying to figure out how the scammer got this payment through

#

I was looking to see if the time_on_page indicated something useful like that's how long they were on the page or something like that

#

also where would "payment_method_data" appear in that confirm request as none of the data which was set in the page is appearing there

dreamy echo
#

I am honestly having trouble finding a definition for what time units time_on_page is represented in here. That may have to be something you talk to our support team to look futher in to

#

What payment_method_data are you expecting that isn't there?

hollow fossil
#

name, email address, billing address is being provided on the page but isn't appearing in what was sent

#

I'm guessing the scammer stripped it off somehow?

#

ok here's an oddity every one of the fradulent transsactions had a time_on_page of 161450

dreamy echo
#

Yeah I am not seeing billing_details on that payment intent, which is where the email and billing address would go

#

It is possible that the bad actor took your publishable key and was making their own confirm calls with it that spoofed another API call they made legitimately through Stripe.js

hollow fossil
#

yeah none of the fraudlent transactions are including it however it is definitely on the page when its inited

dreamy echo
#

At this point, I think it would be best to talk to support about all of these payments, if you provide all of the IDs they should be able to help look further in to what may have happened here. Unfortunately I don't know a ton about fraud here

hollow fossil
#

how do I initiate a conversation with support on behalf of a connected customer?

dreamy echo
#

Our normal support contact methods should be good. I think it is common for users to talk about payments they made with their connected accounts https://support.stripe.com/?contact=true

Stripe: Help & Support

Find help and support for Stripe. Our support site provides answers on all types of situations, including account information, charges and refunds, and subscriptions information. Get your questions answered and find international support for Stripe.

hollow fossil
#

ok thanks I'll contact them for insight

#

do you k now what category of support I should select?

#

connect or api support?

dreamy echo
#

Not sure to be honest, connect sounds right out of the options that I can see when I go to that page

#

They should be able to redirect you if it isn't the right people initially

hollow fossil
#

ok I'm glad I'm not the only one confused LOL