Fraud Checking, based on Rules made by YOU

[radhavallabh]

Can this kind of thing be applicable to Who's Online? As now a days we have various kind of bot attacks that boggle up the mind figuring out which genuine range is camouflaged and which ones are actually scraping or eating up resource..
Do have a CDN still happens a lot,
Resulting in shop to be down...
Warm Regds./
radhavallabh

[burt]

No, this Watchdog is for the Order Process.

[frankl]

Payment method

Credit card
- payment is more likely to be fraudulent than say Paypal or bank transfer.

Paypal
- has two different types of delivery address, Verified and Unverified. Unverified is more likely to be fraudulent.
- Paypal eCheque, the first couple of these the staff processed as if it was a normal Paypal payment (and thus safe). Not so.


Telephone Number
- mobile is more likely to be fraudulent than a landline

Also, try out my Verify Customer addon to cut down on scammers (especially useful for checking mobile phone numbers) - app.php/addons/free_addon/customer_verify_email_sms

[frankl]

Another one -

High risk products. Some products are popular for scammers (items they can relist on marketplaces and get rid of)

[burt]

Nice ideas, thank you for getting involved in making this the best it can be.

[burt]

Paypal
- has two different types of delivery address, Verified and Unverified. Unverified is more likely to be fraudulent.

Where does Paypal store this info in the DB ?

[Dan Cole]

Gary...it shows up under the comments section for the order status (PayPal [Transactions]) and looks like this:

Transaction ID: xxxxxxxxxxxxxxxxxxx
Payer Status: verified
Address Status: confirmed
Payment Status: Pending
Payment Type: instant
Pending Reason: authorization
Source: IPN

Dan

[frankl]

Nice ideas, thank you for getting involved in making this the best it can be.

We've seen every type of ecommerce fraud there can be

[burt]

At what point does Paypal create that entry ?
Is it prior to checkout_success, on checkout_success, or sometime after ?

[burt]

I decided to go "Scoring-Only" rather than a full on "Auto-Blocking"...

Why a "Scoring-Only" System is Useful

Avoids Lost Sales
– No accidental blocks

Saves Time
– Focus review efforts on only high-risk orders

Flexible
– Adjust scoring rules as fraud patterns change.

Transparent
– Shopowner sees exactly why an order was flagged

Why This Beats Auto-Blocking

Reduces false positives
- legitimate orders aren’t cancelled.

Builds customer trust
– more orders get a chance

Adapts to new fraud trends
– rules can easily be changed or evolve

I think it's a pretty solid system.
I'm hopeful of getting some feedback from those who try it.