Need a fraud specialist who can help with identifying the risks presented by a high volume, high traffic payment platform.
Please enter your bid and the list of deliverables that you are able to include with it. Thank you.
Background Information:
We are in the process of designing the platform and we need help with identifying all the possible ways someone can hack the workflows and the system.
Your work product will be contributing to a risk assessment, which means identifying and listing all the risks you can find.
The platform has Donors, and Receivers. the Receivers manage the funds and send them to Service Providers. All three user types are on the platform. Onboarding and Offboarding of funds is via ACH and Credit Card with Stripe.
Examples of risks:
1. User impersonation
2. Fraudulent banking information
3. User collusion (Users colliding to transfer funds, etc.)
Deliverables needed within two weeks:
1. High‑level architecture & data flow (where Stripe sits; funds flow diagram)
2. Draft Terms of Service/merchant agreements; dispute responsibilities
3. Onboarding/KYB/KYC policies; sanctions screening approach
4. Fraud/loss policy; dispute/chargeback handling; ACH return handling policy
5. Payout policy: delays, reserves, change‑freeze, two‑person controls
6. Fraud tracking and remediation log
7. Fraud & Abuse Risk Catalogue (Excel/CSV + narrative) with attack trees, scoring, owners, and control references.
8. Stripe configuration baseline and Radar rule packs; Identity/KYC‑KYB model; payout/reserve controls; webhook security standards.
9. Monitoring & KRI dictionary with thresholds (ATO rate, ACH return mix, dispute rates, payout anomalies, collusion clusters).
10. Incident playbooks: ATO, ACH return spike, card testing/fraud, friendly‑fraud surge, payout fraud, collusion rings.
Please enter your bid and the list of deliverables that you are able to include with it. Thank you.
... Show more