Explore Problems

A bank customer had full account details including SSN leaked to scammers who used them to lock the customer out of their own accounts. Despite not disputing the data release, the bank refused reimbursement claiming no harm was done. This reflects a structural failure in bank data security combined with an accountability gap when breaches occur.

A credit card holder experienced repeated failures where their requested fraud alert configuration, email and text only, was not correctly saved despite multiple confirmed calls to customer service over several months. Escalation requests were ignored, revealing a lack of reliable self-service tools or internal accountability for account security preference management at financial institutions.

HubSpot CRM becomes prohibitively expensive as teams grow, with advanced features locked behind high-cost tiers and inflexible contracts. Lower-tier plans are attractive entry points but lack critical functionality, forcing premature upgrades. With 43 mentions, this is one of the most consistently reported frustrations among HubSpot users.

Citibank fraud review holds block all account access while the review is in progress with no alternative fund access path for urgent needs. Customers caring for dependents or in financial emergency cannot reach money belonging to them. The fraud hold system has no provision for authenticated access to a minimum emergency balance during review.

Centralizing credentials in a password manager creates a single failure point — if it becomes inaccessible through service shutdown, breach, or infrastructure failure, users lose access to every account simultaneously. Self-hosting shifts vendor risk to infrastructure reliability risk without eliminating it. No graceful degradation path exists for most users when their password manager fails unexpectedly.

Some fintech payment platforms place indefinite security holds on customer funds and route all support requests to unresponsive chat or social-media channels with no path to a human. Affected users can go months without access to their own money or a clear explanation of what would resolve the hold.

Identity theft victims who dispute fraudulent accounts find creditors treating a checkbox online application as sufficient proof of identity, with no verification of government ID, IP logs, or signatures. FCRA mandates a reasonable investigation, but creditors rely on internal system data rather than actual identity verification. Victims with documented theft reports cannot get fraudulent tradelines removed from credit reports.

Consumers dispute inaccurate late-payment and settlement remarks on credit reports that do not match their actual account status. Existing FCRA dispute channels are slow and do not reliably produce documentation or corrections.

Identity theft victims report difficulty getting credit reporting agencies to block fraudulent accounts within the FCRA-mandated four-day window despite submitting police reports and supporting documentation. This delay leaves victims exposed to continued credit damage from accounts they never opened.

Borrowers who fund escrow accounts for homeowners insurance report servicers missing premium payments, causing policies to be cancelled for nonpayment. Homeowners are left exposed to coverage lapses, reinstatement fees, and force-placed insurance through no fault of their own.

PG&E shut off power to a single mother with two children during a heat wave and required full payment of a $2,090 balance before restoration. Government assistance programs were insufficient or unresponsive, and no elected official responded to emergency outreach.

Teams optimizing content for LLM citation visibility (GEO) have no reliable way to know which queries to target or whether implemented changes actually improved AI ranking. Unlike Google Search Console for SEO, there is no authoritative feedback mechanism for AI visibility. Marketing and content teams are spending budget on GEO with no measurable signal of what works.

Developers with 9-to-5 jobs who want to build side projects face tools, workflows, and culture designed for full-time founders with unlimited time. Limited coding windows—45 minutes on a commute—are incompatible with complex setup, long feedback loops, and team-oriented tooling. There is no purpose-built development environment for the constraint of intermittent, time-boxed building.

Developers must use separate, incompatible SDKs for each cloud storage provider (S3, GCS, Azure Blob, R2), creating vendor lock-in and requiring rewrites when switching or supporting multiple backends. A unified abstraction layer is missing in the JavaScript ecosystem. 229 HN upvotes validates strong developer demand.

Marketers and SEO professionals have no reliable way to track when their content is cited by AI assistants like ChatGPT, Perplexity, or Gemini. This traffic gets misattributed to direct or dark social, leaving an entire growing channel unmanaged. As AI search becomes a dominant discovery method, the measurement gap creates compounding strategy errors.

Shopify deliberately excludes standard ecommerce functionality from its core platform, requiring merchants to purchase third-party apps for features competitors bundle as standard. Monthly app costs compound into hundreds of dollars per month on top of Shopify's own fees. During outages or billing disputes, merchants face fragmented accountability with Shopify and each app vendor disclaiming responsibility for the combined failure.

Shopify platform updates routinely remove or degrade previously available native functionality, with the removal justified by directing merchants to third-party apps. Merchants accumulate a fragmented stack of app subscriptions for features that were previously built-in, with each app adding monthly costs and an independent support relationship. When the combined stack breaks, neither Shopify nor individual app vendors accept accountability for the interaction.

Companies running critical automations via tools like Zapier, Make, or internal scripts lack reliable monitoring — failures are silent or produce subtly wrong data that is hard to catch. Existing solutions focus on infrastructure monitoring, not business process health. The gap causes real financial and operational harm when automations break undetected.

Multiple fraudulent accounts were opened using a consumer's identity and went undetected until a mortgage lender pulled their credit report. Existing credit monitoring failed to alert the consumer before significant damage was done.

Identity theft victims who submit FTC and police reports find that credit bureaus do not block fraudulent collections and inquiries within the legally required timeframe, leaving inaccurate negative information on their credit report. This delays major life decisions like home purchases and forces victims into repeated follow-up calls with no clear resolution path. The issue points to weak enforcement of consumer data-blocking rights under the FCRA.