How about if the buyer uses a stolen credit card, and a true owner of the credit card makes a chargeback? Is there any way to protect yourself from such chargebacks?
In short... No. If someone gets past all your KYC attempts with a stolen card, and the true owner makes a chargeback, you'll lose. It is the same with "bricks and mortar" stores. The CC companies pass all the "liability" onto the merchants. 
Your options are to be VERY strict with the vetting of credit card investors (full KYC including selfies with custom messages and holding ID etc), or simply don't allow people to use CC's to invest and insist on Crypto (or other non-chargeback) payments only.
The thing is, we will run KYC only after the sale (if Maltese regulators give us the green light), and until investors successfully pass the KYC their tokens will be locked.
By Maltese regulations, KYC must occur before any transaction is completed. We object the regulators by stating that for us the transaction is not completed until tokens are locked. Atm, our lawyers are waiting for their official response.
Why did we decide for the KYC after the investment?
With it, we pay KYC service provider (Trulioo) only for KYC checks of people that invested, and not for all the people that might invest, as if we have done it before investing.
Regarding CC payments we are juggling these options:
- listing on an exchange only 6 months after the sale completion (in this way if a chargeback occurs, we can still hold on to the tokens)
- exclude CC for good
- find out any other viable way to protect ourselves and accept them
