“Since outbound API keys must be retrieved in plaintext to call Stripe, hashing won't work. The correct approach is reversible symmetric encryption (e.g., AES-256-GCM).”
“If your current checkout supports post-purchase invoice creation, Stripe may already generate most of this with the business details, tax number and line items. Otherwise, it is still a fairly contained workflow: receive the verified payment webhook, load the completed order, generate and store the invoice, then email it exactly once.”
“Stripe's terms require the merchant to follow card network rules and applicable law, so this is reportable. Send the receipt to Stripe support and tell them the merchant is surcharging debit, or go straight to your card issuer and dispute it, they can also flag the merchant. The state attorney general route works too if you want to be annoying about it.”
“To me this seems like such a simple workflow that i'd think Stripe should be able to cater to this, even a text section to add to the receipts would do the job...”
“stripe is the processor theyre using, they dont set the price of anything, the merchant does, so emailing stripe gets you a canned reply about contacting your bank. dispute it with your bank or report the merchant to visa/mc, stripe wont do anything about a pricing decision that isnt theirs”
“That infrastructure has now mostly been replicated by @stripe managed payments, @PaddleHQ, and others. But App Store payments do still have the advantage of people being incentivized to keep their credit card updated (or balance topped off) because so many payments go through”
“Stripe could literally make their VAT number, official name and address a pinned FAQ or something. why make people hunt for this info? it's like they enjoy the minor inconvenience.”
“I hope you can dispute the subscription charge with Stripe/bank. Now, I'm reminded that there was a somewhat recent issue (that I read on this subreddit) where many Claude accounts where getting hacked, accessed, or something and the hacker would use the Claude accounts without the actual account holder knowing.”
“Now that accounts and Stripe are going in, try a second user against Search Console data, D1 rows, and any Worker routes that used to assume a single operator. [https://rowly.me](https://rowly.me) checks the full external attack surface of the deployed app, including auth, APIs, storage, and DB rules when present.”
“As far as I understand, using Stripe usually requires having a registered business/company. I would prefer not to open a company in Germany at the beginning because the process, taxes, accounting, and bureaucracy seem quite complicated, especially if I’m only testing an idea.”
“report everywhere ( in stripe , police , court , let a lawyer speak to them ) that’s not a little amount and learn from this mistake never refund a customer unless they didn’t charge back if they did so be it they should wait for the charge back to reflect on their accounts some customers are getting out of hands lately good luck”
“You do not invoice Stripe, stripe is not your final client, you invoice your final client. Stripe however invoices you for the fees they discount from the payment your final client makes.”
“Then when trying to login the next day using the correct email address, their system created a second account and automatically setup a second subscription that would have charged me in 7 days using the bank details I'd input earlier.”
“If you have a paid subscription available for your own Substack, then when you get a paying subscriber, Substack and Stripe take their fees and the remainder is deposited to the bank account nominated in your (or your parents’ if you’re under 18) Stripe account.”
“The "25-hour" hold is a security protocol from Stripe (our payment processor). It happens when a payment fails and a new card is added. Even though you have verified the card, Stripe's automated system holds the transaction for review to prevent fraud.”
“Ah, the classic Stripe Support experience, automated responses and radio silence. Maybe their support team is tied up trying to figure out how to sync their calendars or something equally irrelevant.”
“Stripe Payments Europe, Ltd (SPEL) is the official name. Address: The One Building, 1 Grand Canal Street Lower, Dublin 2, Ireland. VAT number: IE3421271KH.”