Max Mind vs existing customer

[bear]

On several occasions we've had a customer try to pay an existing invoice and get flagged because the IP was too far from the address in the system. The most recent one was a bad IP lookup, as it put him several states away from his true location, so it can get things wrong in that regard. There's a setting in the system to skip fraud checking: "Skip Fraud Check for Existing  -  Tick this box to skip the fraud check for existing clients who already have an active order", but it's still checking if they attempt to pay an existing invoice, even if they have several paid/successful orders in the system. It *seems* like it only skips this if they're placing a new order?

Have I missed something here? IMHO, this should skip fraud checking for existing invoices also.
Thoughts?

[steven99]

So, WHMCS is running fraud checks on an existing service's new, presumingly recurring, invoice?  Uh, yeah don't think that should be happening or at least haven't seen it happen.  Do you have any hooks that could be triggering the fraud check?  

[bear]

No hooks involved, just out of the box WHMCS and Quantum gateway. Long term customer tried paying invoice generated on a service he's had with us a long time (since 2006), and it was declined. Reason: "decline_reason => Risk Score of 100000 -  - distance too far". He has a card on file at the gateway, which would have auto processed in a few days anyway, but he was trying to pay it manually, I'm assuming with the same card. 

Weird one. 

[steven99]

That risk score seems odd for max mind as it seems like a large number for the scores I've seen.   Is there any fraud detection stuff at Quantum? 

[bear]

Good call. Seems they'd added something in the config I wasn't aware of, and that was causing this. Defaulted to a 200 mile distance, when Maxmind should be the one checking. Thanks!