Maximum Credit Card Retry Limit?

[TDub]

Is there an ability in WHMCS to restrict the number of attempts a user can retry processing credit cards?

 

For example, a fraudster may sign up for a WHMCS account by trying to order a product. The user has the payment method fail, but their account is now created, so they can log into their account and just keep trying as many credit cards as they want to see when one finally goes through.

 

My assumption is they then use that validated card somewhere else.

 

I see two options that should be available and I guess maybe I'll post this over in feature requests:

 

1. Offer an option to not create an account automatically if the payment fails.

2. If a customer does get an account, they are given only a set number of times per day to try processing a card.

 

This should prevent fraudsters from abusing the WHMCS credit card processing system, and potentially racking up processing fees even though the transactions are declined.