2f7b22522e2454166b54de3b1b0ea0e4ba6d517306c46f5c64cbba62ee4c8c246e0c4e02943aa24414971bfc9c1be4a7321678d9496bf96b3db5591bb58956b9
sha512
2f7b22522e2454166b54de3b1b0ea0e4ba6d517306c46f5c64cbba62ee4c8c246e0c4e02943aa24414971bfc9c1be4a7321678d9496bf96b3db5591bb58956b9
sha512
Two more recent frauds that we're unable to refund at Gravy, this time from dLocal. The statuses seem to agree between them, but Gravy yields an 'unable to refund' message' and no option to void them.
Many thanks, @Eileenmcnaughton Maybe going back to June 1 2025 might be good to establish clean numbers for the fiscal year? I'm not sure of the $ amount involved, or the tech load to do so. @EMartin do you think it would matter for reconciliation purposes to go back farther?
@RLewis yeah, this transaction stopped at Gravy at Declined: suspected_fraud, so we never received the funds.
Many thanks, @Damilare
Per thread in Slack, a recent inadvertent manual settle at Adyen reached Civi the next day, thanks to recent work by @Eileenmcnaughton
Sorry for my confusion on this, the chargeback was from early 2025 (which explains the search limitations at the consoles).
| Zendesk ticket # | Date reported | CID | Country | Tech Specs | Donor comment | Url? |
| 1812300 | 12/26/2025 | n/a | EN6C | n/a | Error reference: 243636120.1 | n/a |
| 1804679 | 12/17/2025 | 48367213 | US | n/a | Error reference: 242696558.1 | email4 |
fixed per Slack thread, many thanks!
Zendesk 1800056 is another example.
| Zendesk ticket # | Date reported | CID | Country | Tech Specs | Donor comment | Url? |
| 1801431 | 12/15/2025 | n/a | UK | n/a | Error reference: 242460554.1 | unknown |
CID 69717005 came through without PII on 12/19. Transaction ID is 11fe4e1d-461d-4cb0-ae2c-1c67b2571d94.
This is neat, thanks @Ejegg
Great news, thank you and it looks good, @jgleeson
I found a few more recent ApplePay examples, lmk if I can make a separate Task. I've added country + addresses to these CIDs.
Adyen confirmed the new limit for SEPA is 1000€
Adyen is still in the process of raising the SEPA limit to $1k, I'll share here when it's confirmed
Reopening this as @AMJohnson tested this and raised a good question:
one more
Question about how this Task may be solved, will it enable visibility of these reversals in Civi only, or at Gravy as well?
@LWadleigh noticed from Zendesk a PayPal donation that is unrefundable at Gravy, 2e5429ee-0630-4bba-8fa9-ff19aab64517. The refund does not show in Civi, but at the PayPal console 1U047267MX847735A looks like it was resolved from the Dispute Resolution Center. We'd like to nudge this Task upward in priority as it's complicating responding to donors.
Thanks @Ejegg for noting in the Gravy Tracker that PayPal 9629b124-2829-4139-8842-21a7ff1946eb only appeared in Gravy's all_transactions report as authorization_succeeded, never as capture_succeeded (despite showing status Captured at the console). Hopefully they can clarify that.
two more
As far as I know only the two detailed in T410095: recent Gravy-PayPal contribs without PII in Civi are new.
Thanks @Cstone I updated the statuses for cid=67388170 and cid=67347154. cid=67347035 became a chargeback on its own in the meantime.
I am not sure if this would be covered under the Acceptance Criteria, but @krobinson raised the question:
A few more. I've added the country to Civi for all the transactions in this Phab.
I manually added GRAVY b9e97347-db8a-4214-84b1-59f038e90663 / #1754760. I'll check these recent manual imports Monday to make sure that the Friday Adyen audit doesn't duplicate any.
I manually added these to Civi and sent TY emails. Transaction log in Gravy tracker updated.
These two both reached Civi on 9/26
We're seeing about 6 per day. Some recent examples
a few more recently
| CID | Date | PSP ref | Merch ref | UTM | OS | Method |
| 66266070 | 2025-10-20 15:57:57 | HH2TTNMCX8HL9B35 | 238934668.1 | enUS_appmenu_iOS.inapp.apple | iOS | Apple Pay: Visa |
| 68839582 | 2025-10-21 07:50:05 | Z567GQ3VBMK9VR69 | 238959920.1 | enUS_US_2025_10_BannerAdoptedCurrentBestShort_iOS.inapp.apple | iOS | Apple Pay: Visa |
| 68845689 | 2025-10-22 13:30:28 | S86HR43Z6FKD7K69 | 238998077.1 | enCA_CA_2025_10_Control_iOS.inapp.apple | iOS | Apple Pay: MasterCard |
The nightly Gravy audit looks to have missed 09550df0-8723-41da-8547-4c86919894c7, which we moved to Capture yesterday at 02:10:12 PM. I've added this to the Gravy Transactions Log.
Some recent examples showed in an Adyen fraud scan:
After circling with Donor Relations leads, and with Gravy live, this is lower priority for DR now. @Ejegg if Fr-Tech would find this useful feel free to keep at medium, but for DR this is low priority
We've asked the donor for more feedback, and will add any future cases here.
Thanks for looking at this @jgleeson
Thanks @jgleeson
Piero voided the 29 from the WMF-side fail that were stuck at Processing.
Thanks, @Cstone we haven't done a dLocal refund at dLocal since 8/5/2025. The refunds done at dLocal before then have reached Civi.
@Cstone ran the Gravy audit, and these last two got picked up into Civi
Of the 58 transactions marked as Gravy-side fail, only 9 settled at Gravy, and they all reached Civi on the 4th.
From DR's perspective capturing authorized transactions after this much time doesn't scale that well (donors may have used alt methods, may not be expecting a charge to affect their balances) so we'll concentrate on importing only the ones from this batch that are settled.
I added d7d408f6-94e7-4f41-85d4-88c5a58556ab as a one-time donation to the new CID cid=68559348
| Zendesk ticket # | Date reported | CID | Country | Tech Specs | Donor comment | Url? |
| 1737431 | 9/18/2025 | n/a | USA | n/a | Error reference: 236105079.1 | WMF email |
I manually added b7b12b49-dc84-4108-9c42-a701668b6a24 and sent a TY email to ZD #1723321 / cid=23581948
Seilo and Kris found another, cid=8804442 has a recurring created on October 10th, 2021 and the email addresses don’t match between PayPal and Civi - Civi is not pulling in the updated email.
| CID | Gravy trxn | date | |
| 9973589 | bffb44ad-cfa3-47fa-b75f-112e353b80c6 | Sep 9 | trxn not in Civi |
| 68514579 | 7c402ac7-07b0-479a-9ea0-d392a3d16665 | Sep 18 | PII not in Civi |
| 39852746 | 4f89341f-07a6-4f64-9144-4b6f49a208c7 | Sep 2 | trxn not in Civi |
Belated +1 and thanks to @MRitch-WMF re comment > it might make more sense to have something more in line with ... 'Most Recent Direct Mail'.
| CID | Gravy trxn | date |
| 5104115 | d05d010a-2d8b-47ed-a06d-6828ae98ec76 | Sep 2 |
| CID | Gravy trxn | date |
| cid=68391989 | 5195c9ea-c2d5-43a0-8009-48611ece1506 | Sep 5 |
Donor name and email are visible at Gravy, and status is Captured. I can add the PII manually to Civi but wanted to flag.
Seilo and Poliane have found recent card donations that did not reach Civi.
Whoops, sorry for mixing up the transactions. I will copy in the PII for both, if that makes sense.
Thank you, Jack, it's at https://civicrm.wikimedia.org/civicrm/contact/view?reset=1&cid=68332359. I'm ok with manually importing the PII, but will wait to do so in case it will obscure any trails.
Only one recent PayPal missing PII in recent days, 3845a41f-55fd-4edc-9331-0d44f3ac2b6f has name + email info at Gravy, but the PII did not reach Civi. @jgleeson I cam manually add the details but if there's any way we could tell why this one didn't get picked up that would be great.
Amber spotted a new instance today where Gravy did not pick up a fraud rejection code, so I reopened the item on the Gravy tracker.
I added emails and names, and sent TY emails for these.
And one Venmo:
| cid=68299509 | 8/22 | 8fc07cd5-fa9c-420e-8287-f04109783b21 | spontaneous |
Many thanks, @jgleeson . We have enough info now to help the donor, so I'll close this Task.
Thanks for the careful followup here @jgleeson. We will check with cid=68166226 to see whether they intended two recurring donations and cancel one if not.