stripe: handle scam attempts