Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

What's the deal with these reshippers? It seems like the weak point in the scam, Amazon should either blacklist their addresses or coordinate with them to authenticate where the package is actually going.


While there are higher risk, you can't really just blacklist them all since there are a lot of legit orders that get sent to reshippers. For example, customers buying from overseas and the merchant may not offer international shipping. So you have to look at other data points as well.

In this case, having an established order and delivery history and then to have it shipped to reshipping is odd and should've raised a flag.

I'm sure Amazon's fraud system knows about that address. But maybe that flag is not exposed or given to the csrs. That particular one in Oregon is used fairly frequently by fraudsters. We've seen it a number of times among our merchants.


A much easier way would be to refuse to ship to an address that's not already active in your address book. If you really need to ship to another address, it's not too much to ask that you go through the full account recovery process and enter the new address (which will prompt you to re-enter your credit card number).




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: