Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

>for creating a system with so few checks that it appears to be designed to facilitate fraud and theft.

I'm too lazy to create and verify a cashapp account, but so far as what I can find online they do SSN/name check + id check + selfie (liveliness) check. What more do you want?

 help



> they do SSN/name check + id check + selfie (liveliness) check.

They obviously failed to do that here.


> SSN/name check + id check

Almost everyone's info of the above kind is available on the dark web, as the original article about this case explained. That situation is the result of everyone collecting KYC information while also being too incompetent to properly guard it.

> + selfie (liveliness) check

I don't know what this is, but it protected nothing and it's apparently useless.

Then, after the fraud CashApp protected the fraudster by stonewalling the victim and the lack of exculpatory evidence led to the filing of formal charges.


If they put the match ratio value lenient enough to not reject a lot of people in bad lighting conditions you can make a dog match. So it's likely useless.

All I know is cashapp is designed in such a way that when I hear people want to use it I bail immediately because it's a strong signal a scam is about to happen, and my other financial services don't have that property. It's empirically good at facilitating fraud and theft. I'd be curious in someone doing a deep dive to figure out why.

Whatever is needed to prevent fraud perpetuated on their platforms.

>Whatever is needed

Someone made a fake account -> we need "Whatever is needed" to make creating fake accounts harder is exactly the wrong way of thinking about it. It's the same kneejerk reaction that got us PATRIOT act and TSA after 9/11.

https://www.bitsaboutmoney.com/archive/optimal-amount-of-fra...

Or if you're more swayed by social justice, all these onerous checks also makes it harder for "unbanked"/"underbanked" people access to the financial system, which has real harms for them.


The person who is now facing charges for a crime she did not commit is experiencing ‘real harm’.

Absolutely shameful to defend a b$ company that doesn’t not have adequate protections to prevent this from happening. Imagine this happening to you or your own - whisked away and locked up for a month for the crime of losing your wallet and getting your identity stolen.


>Imagine this happening to you or your own - whisked away and locked up for a month for the crime of losing your wallet and getting your identity stolen.

You know what's worse than sitting in jail for a few days? Dying or losing a loved one from 9/11. So you better get used to more federal agents scanning your communications and more TSA groping you at the airport. No cost is too great to prevent losing a loved one to terrorist attacks!

/s


> You know what's worse than sitting in jail for a few days?

You haven't read the article. The stakes are much higher than "a few days in jail" which isn't nearly as small of a problem as you make it out to be either.

> Dying or losing a loved one from 9/11.

Why do you have to repeat this nonsensical 9/11 strawman of an analogy which has nothing to do with the case in question? Nobody asked for government "scanning of your communications". What you failed to notice is the refusal of CashApp to provide information about the fraudulent account because the victim couldn't prove owning it while she was being investigated for owning it.

CashApp stonewalled the victim and prevented proper investigation before charges were formally filed and the prosecutor got involved, after that it was to late and the mess that followed resulted in great expenses, turmoil and further risks for the victim.


Doubling down on a weak argument doesn’t endear anyone to your position, especially when it’s trivializing actual tragedies. For what, even, for flawed systems to remain flawed? TSA is a joke made to harass innocents while PATRIOT was a consolidation of power. It is true 9/11 was used to ram legislation that hurt Americans. It doesn’t mean every response to an unfortunate situation is wrong.

Additionally, your argument is to do what, exactly? Apply zero pressure to the company which aids and abets fraud to the detriment of innocence because you find “social justice” and restrictions distasteful? Accessing money should be laborious and should require various verification forms (even if I disagree that photographing IDs and selfies are actual forms of verification), because as we see here laxness has resulted in an innocent person’s life being upended.


A b$ company putting in more protections for its customers and non-customers by doing more checks is equal to TSA groping you? Please make it make sense.

The optimal amount of fraud is non-zero.

This statement is obvious to anyone who has any experience dealing with fraud, but shocking if you haven’t thought much about it.

It’s actually impossible to completely prevent fraud on a platform because there are so many variations of fraud that can’t be prevented up front.

They could demand in-person DNA samples to open an account and there would still be some fraud.


The simple fact is that you can't just open an app and then let it destroy the lives of people with absolutely no connection to it. The company itself must be responsible. Saying "the optimal amount of fraud is non-zero" is only acceptable if the cost of that "non-zero" amount is borne by the company itself; otherwise the result is plainly misaligned incentives.

>The simple fact is that you can't just open an app and then let it destroy the lives of people with absolutely no connection to it.

Wait till you realize how 911 aka "swatting" works.

>The company itself must be responsible.

So in the swatting case should we blame Verizon for allowing the call to be placed in the first place?


In the swatting case we'd blame the SWAT team for not vetting the call properly and for not cooperating with the authorities after they'd killed the kid on the driveway.

You're the second person who doesn't seem to realize that fraud prevention requires proper actions before and after fraud is detected/suspected. Failing to react properly on fraud protects the fraudsters - like CashApp has done - and makes the platform a magnet for fraud.

CashApp failed to investigate and provide vital information to victim while she was being investigated - they did that too late only after they were compelled to do so by the court and lawyers, creating a very hard situation for the victim and allowing the fraudsters to cover their tracks.


The optimal amount is zero, but the realistic amount is non-zero.

Zero fraud is non-optimal because the effort required to achieve it would make transacting impossible.

I suppose I should have spelled it out, given that so many people didn't get it.

It would be like declaring that the optimal number of vehicle deaths is zero, but then not realizing that the only way to achieve that is to make sure nobody can drive. When faced with the realities, everyone backs off and acknowledges that some risk is necessary


I suppose you need it spelled out again, since apparently this is a difficult concept for you to grasp.

The optimal—defined by MW as “most desirable or satisfactory”—amount of fraud is zero. The optimal target—synonymous with amount in this context—of vehicle deaths is also zero. The realistic value for either statistic is non-zero. You even said “when faced with the realities”.

You’re the only one not getting what is basic logic and definitions. Or more accurately, you are getting it, but you’re refusing to accept that your imprecise language was incorrect. You misused optimal when you meant realistic.


The optimal _target_ for fraud is not zero. That's the aphorism. The optimal _amount_ of fraud is indeed zero, for most value systems. You had to spell it out because you were imprecise.

You come across as one borrowing patio11’s coat. He's a great blogger. You aren't.


> The optimal _target_ for fraud is not zero. That's the aphorism. The optimal _amount_ of fraud is indeed zero, for most value systems.

You got it backwards in your rush to squeeze your ad hominem attack in there.

The optimal target for fraud can be zero. It's okay to aim for zero.

The optimal amount of fraud cannot be zero, because the cost to get to zero goes asymptotic to infinity as it approaches zero. Therefore the optimal amount of fraud cannot be zero.

> You come across as one borrowing patio11’s coat. He's a great blogger. You aren't.

Please don't sling ad hominem attacks like this.

I don't know why you're trying to compare me to someone else. These concepts did not originate with patio11. Is your only exposure to these concepts through one HN user's blog posts?


You came across as arrogant in your comment to tourmalinetaco, as if you are a great educator let down by the intellectual inadequacy of your acolytes. In truth, your conflation of "amount" and "target" muddies the concept you are trying to convey. If you wish to be brief, be precise.

You are so determined for me to be wrong that you've tied yourself in a knot.

This is not an ad hominem, it is a direct criticism of your attitude.


Say goodbye to being able to pay for anything by credit card unless accompanied by valid state ID, passport. and iris scan.

They would probably have to send out an agent to your house to live with you and watch you make every transaction to ensure it’s legitimate.

And, even then, you might lie to the agent or maybe strike up a deal or something so… even that wouldn’t work.

The ideal number of fraud is not zero, if it was zero we would either be living in a dystopian novel or not using the service at all.




Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: