Neither one looks like fraud in your dashboard. Both look like growth.
These are the checks worth wiring in before the program gets big enough for it to hurt.
Self-referral: match on the card, not the email
Email matching is the obvious check and the easiest to beat. Anyone who wants the commission will use a second address.
Stripe gives you something harder to fake. Every PaymentMethod carries card.fingerprint, which stays the same for the same physical card even across different customers.






