[Darkling]

Here is the situation.
There is some software that I bought a while back and the company, which is based in Poland, does not accept PayPal.
I do not have a credit card.
At the time I opted to pay by bank transfer but that was rather expensive.
Now that I am upgrading I have the use of my mother's (aren't mums great) credit card.
This is with her knowledge and consent.
When I logged in to my account with that company's web site I found that it would not allow me to change the name of the person being billed and so could not use a credit card that was not in my name.

The evil minded techie that I am, I went through the bulk of the purchase process on their web site until it came to submitting the details to a third party transaction processor.
At that point I saved the page to my HD, edited the name, and changed the relative pathing to the form processor to the full URL.

It so happens that they do not have referrer checks to see that the form actually originates on their own site.

The order was processed and accepted.

[kall]

Oooh, probably.

People try that on Sparkle Hosting every day...without actually having the intention of paying from a card tho.

[Darkling]

Note the intent to pay, actual payment, and card holder's conscent.



Still feels dodgey, though.

[nih]

Not allowing delivery to an address other than the billing address with a credit card payment is pretty much a standard now. Some companies offer a rigorous testing procedure to get around it though.

If you changed the deliver-to name to your mothers (I very rarely RTFA) then no harm done really, that's only a milder form of fraud.

[Darkling]

There is no delivery.
It is downloaded.
The address on my account is my parents house so that it the same as the billing address anyway.