Chargebacks & Fraud

A Skimmer Hidden in Google Tag Manager Used Stripe’s Own API to Store Stolen Cards

Sansec documented a Magecart skimmer that loads from real Google Tag Manager containers and stores Magento checkout data as fake Stripe customers. Why a CSP allowlist misses it, what PCI DSS 6.4.3 and 11.6.1 expect, and what to check.

E-commerce 4 Internet Marketers Editorial
High-Risk Merchant Accounts

How Stripe’s FDA Vape Rule Compares With Shopify Payments and PayPal Policies

Analysis. Stripe's Prohibited and Restricted Businesses page, updated September 22, 2026, says U.S. merchants selling electronic tobacco may only sell FDA-authorized products. Shopify Payments prohibits tobacco outright, and PayPal's 2022 policy puts e-cigarettes in pre-approval.

E-commerce 4 Internet Marketers Editorial