haveno-dex / haveno

Decentralized P2P exchange platform built on Monero and Tor
https://haveno.exchange
GNU Affero General Public License v3.0
997 stars 110 forks source link

Add Payment Method: Buy XMR with Amazon Physical Card #1077

Open mpig4 opened 3 months ago

mpig4 commented 3 months ago

After consultations concerning of the vulnerabilities of email and in conjunction with issue #1239; I update with the use of a SimpleX address visible to the taker and arbitraters.

Method: Buy XMR with Amazon Physical Card (Purchased with Cash) Reason: Popular on localmonero and anonymous version of eCard. Vulnerabilities: Same as eCard where a dispute is over card already redeemed. Account creation fields: As Amazon eCard except the addition of a SimpleX(SX) address field which is mandatory. Settlement period: 1 day.

Offer stages:

  1. Purchase Amazon Physical Card with cash, retaining both the purchase verification receipt and a cash receipt. Store details may be redacted but not purchase date and time. Purchase verification and cash receipts scanned along with the physical card after revealing the redemption code. Remove metadata from scan(s).
  2. Create offer with SimpleX(SX) address details and confirmation that card purchased with cash in notes field.

Taker stages:

  1. Account created with SX address details and SimpleX prepared.
  2. Takes offer. (optional[not recommended]; chat used to indicate acceptance of the redemption code being sent by Haveno trade chat. This is useful where the xmr buyer has 'reputation'. see Notes below)

Trade stages:

  1. XMR Buyer confirms trade.
  2. XMR Buyer SX the scans of the verification receipt, the cash purchase receipt and the physical card with redemption code revealed.
  3. XMR Seller redeems the Amazon code.
  4. XMR Seller confirms payment for xmr.

Arbitration risks The same as eCard trades, but reduced by using SX to send scans.

Notes: XMR Seller can opt for the redemption code being sent via Haveno trade chat, which can be useful where both sides have traded previously.

monerobull commented 3 months ago

Am I wrong or is his is still a whole lot less secure than the e-cards?

mpig4 commented 3 months ago

Can you be specific? Cash is less traceable than eCards bought with an account.

woodser commented 3 months ago

Unknown if arbitrator has access to trade chat.

The trade chat can be signed and sent to the arbitrator after a dispute is opened.

mpig4 commented 3 months ago

Thanks woodser

monerobull commented 3 months ago

@woodser is the trade chat actually provably correct when uploaded via the UI? See https://github.com/haveno-dex/haveno/issues/938#issuecomment-2123977087

woodser commented 3 months ago

Actually I don't see that the trader chat messages are signed to be provably correct.

XMRfamily commented 3 months ago

Am I wrong or is his is still a whole lot less secure than the e-cards?

An amazon gc bought in person with cash at cvs/Walmart/etc and then redeemed is less likely to be reversed. Issue could be that they "redeem first" but that's why trust is another important factor because arbitration for gift cards is hard

XMRfamily commented 3 months ago

Haveno not having a feedback/reputation system causes a lot of issues for fiat- xmr trades mainly because risk of fraud/chargebacks

monerobull commented 3 months ago

It kinda does have a reputation system already. The more trades you make, the less likely you are to get scammed because you'll build your very own circle of trust. If hidden & searchable offers become a thing, even more so.

mpig4 commented 4 days ago

Suggestion updated, thanks @charcharchar