Livingston: Did you...
Livingston: Did you patent this technique?
Levchin: I didn’t really want to patent it because, for one, I don’t like software
patents, and, two, if you patent it, you make it public. Even if you don’t know
someone’s infringing, they will still be getting the benefit. Instead, we just
chose to keep it a trade secret and not show it to anyone.
After a while, IGOR became well known to the company, like all the other
tools that we had built early on. We had patented some of it, and some of it we
said, “OK, it’s open for wide use now.” There’s still a whole bunch of tools that
they are using today that are not public. They don’t talk about it much at all, and
I think that’s a good thing.
Livingston: So is PayPal in a sense a security company?
Levchin: I think a good way to describe PayPal is: a security company pretending
to be a financial services company. What PayPal does is judge the risk of a
transaction and then occasionally actually take the risk on. You don’t really
know the money’s good; you just sort of assess the riskiness of both parties, and
you say, “I’ll be the intermediary with the understanding that, on occasion,
PayPal will be on the hook for at least part of the loss if the loss occurs.” Which
is very tricky; it’s a hard position to be in.
So the company’s core expertise, by definition, has to be in this ability to
judge risk—to be able to say, “Is this the kind of transaction I really want to take
on or is this something I should steer away from because you people look like
thieves?” I think that’s the security part. I mean, security not in any sort of a
sense of anti-hacking defensive, but just security in a broader sense: risk assessment,
figuring out what’s the sane thing to do, what’s unsafe, what’s safe.
Everything else that PayPal has built is sort of a commodity. The reason we had
so many competitors in 2000 was because it looks really simple on the outside:
you sign up, give us some credit card numbers, let’s trade some money, done.
Livingston: What did you do that your competitors couldn’t?
Levchin: The really complicated part is figuring out the risk. The financial
industry people understood the risk, but they weren’t willing to do the sort of
stuff we did, where they would basically say, “Bad guys over here. Let’s get all
the bad guys out.”
There are tools to just say, “Give me your social security number, give me
your address and your mother’s maiden name, and we send you a physical piece
of paper and you sign it and send it back to us.” By the time that’s all accomplished,
| ← then eventually became | you are a → |