Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I have some sympathy for Paypal here. They encounter a lot of fake charities, so the word "donation" is a red flag to them.


Red flag? Hmmm, don't think so...

https://www.paypal.com/us/cgi-bin/?&cmd=_donate-intro-ou...

"To accept donations, put a Donate button on your website. Creating the button is easy. We provide the HTML code, which you simply copy and paste to your site. Donors can then click the button to make donations. See button features you can customize."

How could you use the Donate button? "Let’s say that you are an animal rescue organization needing to raise funds to provide care for animals. You can easily add a donate button to your website and make it safe and convenient for supporters to give to your cause"


cperciva, there are actually two common scams involving charities and paypal. The first is the risk of people donating to fake charities as you mentioned. The second is the risk of criminals using stolen credit cards to make donations to charities; in other words, testing to see if the stolen credit card information is usable. The headaches caused to charities are very painful, prolonged and costly (charge backs).

There are other similar and/or related scams involving "charities" (both legitimate and fake) but I feel this is the wrong place to discuss them.

The trouble the OP has with "donations" to an open source project tend to be very common with paypal and they often result in a false-positive in the paypal "fraud detection" (risk management) analysis. I know of one example where a prominent OpenBSD developer needed some fast hardware. He does full builds of the entire "ports" tree (i.e. all software ported to OpenBSD), so buying powerful (read: expenseive) hardware was really needed. One person stepped up with a donation/gift of the needed funds, and sent the payment through paypal...

The first thing that happened is the donor got a call from paypal because the donation triggered a false-positive in their "fraud detection" analysis. It might seem like an annoyance, but this is actually a good thing.

The next thing that happened is, the donor got a call from the credit card department of his bank, mainly because he used only a credit card with paypal. Yep, there was another false-positive alert on the fraud detection system of his bank.

During these two false-positives, the paypaly account of the open source developer receiving the funds was locked. In this case, the mistaken lock was resolved very quickly due to the two separate phone calls, but it was still a pain in the ass.

There is hope. The way to get around the paypal "requirement" of an open source project needing to be a vetted and registered 501(3)(c) organization in the US (or equivalent in other countries) is to have the payments classified as a "gift" rather than a "donation" in paypal parlance.


Exactly, it seems a lot of people don't understand what Paypal is. They're a high risk business, if you tried to open a bank account with an email address and name you'd be sent on your way, but with Paypal you can. This makes fraud a huge issue for them, so it's entirely reasonable for them to be locking accounts when something vaguely suspicious happens. Paypal shouldn't be treated like a bank (even if they're registered as one here in Europe) because they're not.

If they get even a whiff of fraud or a scam then they're sure as hell going to investigate, because if it goes wrong and it is fraud who has to pick up the bill? Paypal.


Does Paypal give the money back to the donors after a certain amount of time has passed or do they continue to keep other people's money?


How do fake charities impact them, exactly? Are they losing out on tax per transaction, or what?

(What is a "fake" charity, anyway? I've worked with some charitable companies that were outright scams, but due to clever phrasing, continue to do business.)


How do fake charities impact them, exactly? Are they losing out on tax per transaction, or what?

I expect that when such organizations are uncovered, paypal gets a flood of credit card chargebacks (but can't recover the money from the "charity" because by that point the scammers have drained the accounts and moved on).

What is a "fake" charity, anyway?

The canonical example is "disaster relief" organizations which pop up after each major earthquake but just pocket the cash rather than assisting disaster victims.


I have none. The colour of my flag does not make me guilty of fraud.


It's like pulling a fake gun near a cop. You can't be honest without looking honest.


Given how many legitimate people collect donations through paypal, I would say it's more like pulling a fake gun near a cop in a fake gun store.




Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: