Payment to a Yandex.Money account with a VISA / MasterCard card or how to block an arbitrary wallet

Almost a year ago I started accepting payments to my Yandex.Money account from VISA / MasterCard credit cards on my website. It didn’t go without problems , but in the end everything worked.

Recently, around February 9, on one of the wallets in Yandex.Money, transfers made by the card suddenly stopped coming. At the same time, transfers made by Yandex.Money continued to arrive regularly.
')
What is the reason, who is to blame, and how can I (try) block any Yandex.Money account for receiving funds through VISA / MasterCard - try to figure it out under the cut

What does the error look like

The site has a “form-taker”, as Yandex calls it, with the option to choose - pay with Yandex.Money or pay with a VISA / MasterCard card. When paying with Yandex.Money, the payment is successful. When paying by card, the procedure is as follows:
On the Yandex.Money service, on the page complying with the international PCI DSS standard, we are offered to fill in the card data, enter the number, full name, expiration date and CVV code.

After filling in all the fields, we are redirected to the bank's website, where you need to enter the code received by SMS

Almost instantly comes a text message from the bank about debiting . But Yandex at this moment gives such a picture:

We understand the reasons

At first, it certainly scares. The money was written off, and then there was some kind of mistake. Yes, they ask to repeat the payment.
But after a while, an SMS arrives from the bank to cancel the operation. Already better, but in general the problem remains.
I try to pay again, as offered. The result is the same.
I try to pay from the card of another bank. The result is the same.
I’m looking for another Yandex.Money account, correcting the “acceptor form” so that the money is sent there. And voila - the payment from the card comes.
So the problem is in the bill.
Checking limits - not exceeded. Yes, and Yandex.Money payment comes, it means everything is in order with limits (there were no separate limits for replenishing the wallet from payment cards on the Yandex.Money website)

What technical support will tell us

If all else fails, we will write to Yandex.Money technical support. I describe the problem, send a request from the site, directly on the link on the page “Oh! Something went wrong".
After a couple of days, technical support responds with a question: “Is the problem still relevant?”
I answer that is relevant.
They propose to generate the “form-recipient” code again and try. Of course, I did it, and more than once, well, I will do it again. I create a form, insert it on an empty html-page on the site, try to pay. The problem persists, as I inform technical support.
And here comes the answer:

TP Yandex: Unfortunately, you will no longer be able to accept transfers from bank cards to the purse 4100xxxxxxxxxxx through the form posted on your website. This is due to the rules of international payment systems prohibiting the receipt of funds from cards on sites of a particular subject. But you can still replenish your wallet from a bank card without using a special form or accept transfers from electronic wallets.

What a twist! I wonder what's wrong with the theme of the site? Try to find out.

I: Can I accept transfers from bank cards to the purse 4100xxxxxxxxxxxxx on other sites?

And is it possible in more detail about the theme of sites? Where can I see a list of topics, the reception of funds for which is prohibited by the rules of international payment systems ? I would like to read, so as not to fall under the sanctions backdating.

TP Yandex: Unfortunately, the receipt of funds from the cards on the account 4100xxxxxxxxxxx is closed. This information can be provided by MasterCard and Visa support staff.

Sites of a particular theme

In general, it was not possible to find out what these “sites of a particular subject” are from Yandex technical support. How to contact the staff of support services MasterCard and Visa no ideas yet. In my opinion, the question “Why can I not replenish my Yandex.Money account using the Yandex.Money form on the Yandex.Money website using a MasterCard card issued by Sberbank, which owns Yandex.Money?” Will look somewhat silly.

There is a suspicion that my Yandex.Money account was “lit up” on the test page of the still not running project of the movie catalog (film descriptions + magnet links to files in the DC hub of the local LAN), without design and anything else that “shines” the Internet. It is quite possible that Western right holders decided that pirated content was located on the site and did some work on blocking the account.

In favor of the fact that the problem is in this movie catalog, it is said that other Yandex.Money accounts to which funds could be sent from the main site are not blocked, but only the one that “lights up” in the movie catalog is blocked. (Several accounts were made, since there were several participants in the main project, and the funds received were distributed approximately evenly among the participants. And only one account was blocked)
Against this is the fact that, as seen in the screenshot, the form-taker on the abandoned project is old, without the ability to send money through bank cards. But who looks at it?

Block someone else's wallet

In this connection, an interesting opportunity arises: place a form-taker with the account number of an objectionable person on a “specific subject” site under your control - and after a while card payments to his account will be blocked unilaterally without explaining the reason. The address of the “site with a specific theme” that caused the blocking will not be communicated to the account holder (in any case, I didn’t find it out)
It is possible that my account was blocked in this way.

Is it in the international payment system?

Despite the statements of Yandex.Money technical support that “receiving money from the cards on the account 4100xxxxxxxxxxx is closed”, in reality, it is possible to replenish the account from the card. On the Yandex.Money site there is a form through which I replenished my account with a bank card. True, the commission in my case was 4900% (Four thousand nine hundred percent, replenished by 1p, was written off 50p. What, however, was warned in advance)

The difference is visible in the purpose of payment. The “transfer from the card” does not work, but the “top-up from the card” works. For me, as a philistine, this is the same thing. The Yandex.Money transfer from the linked card has not been tested, the usual Yandex.Money translation works.

In this situation, the most annoying are referrals to VISA / MasterCard support services, despite the fact that the account is blocked in Yandex.Money.

In the rules of international payment systems ( VISA rules and MasterCard rules ) nothing about the “websites with a specific theme” was found by me. True, the documents are quite voluminous, I ran through them only superficially and could miss something.

PS The site that hosted the form-taker engaged in raising funds for the local local network, intended for the purchase of equipment (server, cables, switches) and material support for the administrators of this network, as well as holding various contests with material prizes between network users (gifts - souvenirs, going to the cinema, etc.). The acceptor form was available only to users of the local network, from their “gray” IP addresses. It is unlikely, in my opinion, that this site could get into a “list of sites with a specific theme” (whatever it means). Although for me the subject remained “uncertain”.

Continued. Reply from TP Yandex

After the article was published on Habré (it’s a pity that only after this, through direct channels it didn’t work as always) I received an exhaustive answer about the reason for blocking payments to the account via the IPU. Indeed, the case was in the movie catalog page, which, according to Yandex’s internal review, “contains links to copyrighted content.” Whether a magnet link is a link to content in the direct sense of the word is an open question, opinions on this subject can be very different, and this is a topic for another discussion.
More upset another: it turns out you can really place the form-recipient with someone else's account on the site of the "wrong" orientation, thereby having the opportunity to block the recipient's account on other (all) sites. One could at least check referer, it seems to me technically possible.