Jump to content

Avoiding fraud: Keeping Stripe payments for new customers uncaptured until their orders are accepted

Go to solution Solved by WHMCS JoshQ,

Recommended Posts

Hi folks,

In the past day we've received a flood of new domain registration attempts from a 'new client', a few of which made it through, meaning we've had to eat the Stripe fee and the domain cancellation fee. In order to mitigate this we're playing whack-a-mole with the IPs they're using and we've disabled auto-registration for all of our domain extensions. This stops us from having to pay the domain cancellation fees but as far as I can see when a client checks out the payment is captured there and then, meaning we're getting the Stripe fees regardless.

I'm not seeing a setting where we can have the payment be authorised only until we're ready to accept the order. Does anyone know how we might achieve this?

Much appreciated 🙂


Link to comment
Share on other sites

  • WHMCS Technical Analyst
  • Solution

Hi @RS 🏴,

The best way to set something like this up would be configure one of our built-in Fraud Modules:

When a customer places an order and this order is detected as being fraudulent, the customer will be displayed a message like this one after completing the checkout process but before they are sent to the payment gateway to complete payment. Additionally, no email will be dispatched to the customer.


On the basis that this can be achieved by using our Fraud Modules, we wouldn't also add this functionality to Gateway Modules. Once you have verified the legitimacy of the order, you can release it.

Hope this makes sense. 🙂

Any further questions, feel free to ask!

Link to comment
Share on other sites

  • WHMCS Technical Analyst

Hi @RS 🏴,

My recommendation would be to harden your Fraud Module settings, in that case. Instructions for doing so can be found within the specific module's documentation:

It would be possible to delay payment capture (or more realistically, invoice generation) until after the Order Status gets set to Active through the creation of some action hooks, as is elluded to in this thread:

However, please note that this is not how WHMCS  is designed to operate, and this would be heavily modifying WHMCS' order flow. It wouldn't be an easy implementation. That said, some lovely people in the Dev Corner might be able to get you setup,.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Create New...

Important Information

By using this site, you agree to our Terms of Use & Guidelines and understand your posts will initially be pre-moderated