Comment · Thu, June 8, 2017 · Ceretropic & Nootropics Depot
Nootropics Depot asking for a lot of personal information just to make a purchase...
Original post in this thread
oompa_loompa0 · 44 points
I am trying to make my first purchase with Nootropics Depot. As you get 10% off as a first purchaser I decided I would stock up - to the amount of about $390 USD. I get this email a few days later, about noon'ish:
------
Thanks for your order! We have received payment on your order, however, our fraud protection software has flagged the order due to a recent amount of fraud. Because this is your first large order with us, our fraud prevention requires another step of verification. Typically this verification is handled by getting a scan of your identification, credit card used (you may redact all but the last four digits), and a copy of a utility bill that verifies your billing address. Once we have this information, we will then be able to approve this purchase, and we will not need to verify future orders.
If we do not receive a response regarding the verification of your order by the end of the day, we will unfortunately have to cancel your order. Sorry for any inconvenience.
You may use this secure form to send us your proof of identification for this order:
http://nootropicsdepot.com/payment-verification/
Once you have submitted the necessary documents, please let us kn…
What they were answering
Expo- · -8 points
That doesn't mean anything if this "jotform" company can't secure their data. An SSL certificate doesn't just automatically make a site and the storage on the site's server safe. You should check into the verification method I sent you as I'm a constant customer on your sites and if I got that email I would never submit anything to some potentially insecure site out of your control. NetVerify, while still a 3rd party, is used by massive companies and is incredibly secure and advanced. It is like the Cloudflare of identification. It automatically would complete this verification you want without human involvement besides the user. I would seriously fix this and take the criticism as constructive as you are kinda addressing the issue condescendingly.
u/MisterYouAreSoDumb · Ceretropic & Nootropics Depot
Customer information is never stored anywhere. It is sent securely to us, verified by my team, then immediately destroyed. Nobody but my support team can see the info, and even they cannot access it once it has been viewed and destroyed. Furthermore, we never even see the full card number from any customer. That is sent securely to our card processor without any storage on our servers. My team cannot even see that information, much less access it at a later time. I was in networking and data security before I got into nootropics. Contrary to some statements made on this post, I am not some data-illiterate person. I fully understand the details of all this. I used to program and teach it.
My intention is not to convey condescension, but frustration. It's a frustration that arises from the fact that a 14 day old account can make wildly inaccurate speculations about us, and get up-voted to the top before I can even see the post. Then other new accounts take that speculation, and post it in other threads all over the place. It's a frustration that arises from the fact that I have to put honest customers in this position because of dishonest ones. It's a frustration that arises from the fact that there is a possibility that I will have to shut down one or both of my companies soon, due to this fraud. Did you know that at least one of these fraudsters used the products he acquired through us and Powder City to start his own nootropics company? Yes, ours and PC's powder was purchased using tons of fake accounts and stolen credit cards, then put into products this person then went onto sell under his own brand. These are coordinated attacks meant to try to shut us down, and eliminate competition. This is why I am so frustrated. I apologize if I ever come across condescendingly to you or anyone else, but please try to understand how infuriating this is for me. I want to run an honest and open nootropics company, and we are attacked almost every week.
I will certainly look into NetVerify. Thank you for the suggestion. We kept in in-house, due to the speed in which we needed to verify things, and the fact that I thought people would rather trust my team looking at their info, rather than another 3rd party. If people are more comfortable with a service like NetVerify, I would be more than happy to use it. I want nothing more than for everyone to easily, quickly, and securely purchase the products they have come to trust from us.