Is it me, or is maxmind not blocking orders from South Africa?

[neobug103]

I continue to see orders being approved by my dumb techs that are from south africa. I have the option in maxmind to block high risk countries, does maxmind not consider south africa a high risk country or what!?

[Tech Entrance]

Why not block by country ?

[othellotech]

SA/ZA isnt a high-risk country, no.

We've seen very little fraud or even attempted fraud from there and have quite a few happ South African clients.

Have you tried blocking proxies - the only attempted fraud orders I've seen from there have all been through proxies.

[Tech Entrance]

SA/ZA isnt a high-risk country, no.

We've seen very little fraud or even attempted fraud from there and have quite a few happ South African clients.

Have you tried blocking proxies - the only attempted fraud orders I've seen from there have all been through proxies.

 

I'm thinking of using maxmind but want to know if you see some kind of verification confirmation in order page in admin area telling me that this order passed fraud check ?

 

Is it instant or takes time so order stays pending (client doesn't get account information) until verification is complete ?

 

Where to decide what countries to block, WHMCS or maxmind account ?

 

an overview of your experience with maxmind+WHMCS will be appreciated.

[PPH]

You get a nice block on the order page with all the details of the check Orders function normally if the check has passed. I guess it gets marked as fraud if it doesn't? We haven't had one fail yet since turning it on so we can't say how it handles a fail!

[Tech Entrance]

You get a nice block on the order page with all the details of the check Orders function normally if the check has passed. I guess it gets marked as fraud if it doesn't? We haven't had one fail yet since turning it on so we can't say how it handles a fail!

 

Nice screen shot man.

 

Now can you share screen shot of how you set it in WHMCS ? mainly those values

 

MaxMind Fraud Risk Score

 

Telephone Fraud Score

 

 

Also do you activate phone verification ?

[Daniel]

Here's a screenshot of a Fraud order.

 

The client doesn't get to the payment gateway so obviously no details are sent to them regarding the account.

 

Fraud checking is pretty much instant, i've not had anyone report a delay in their order.

[Tech Entrance]

Daniel, Your thumb is so small. can you upload it on any image hosting site instead ? want to see full size

 

do you have phone verification enabled ? can you share screen shot of MAxmind config in your WHMCS ?

 

Thanks

[Daniel]

No idea why it came out so small..

 

Fraud Order - Click Here

 

Maxmind Settings - Click Here

 

We don't bother with the telephone verification, I've heard some people have problems with it.

[Tech Entrance]

Thanks Daniel. that was a great post

 

I think you should activate phone verification as well. should be useful because a fraudster won't ever give you his phone number

 

Btw, how to get the free Maxmind account that comes with WHMCS ? and how many orders can it check before it expires ?

[Daniel]

I've not had a problem without phone verification turned on so have no reason to change. It has blocked alot of fraud orders as it is.

 

I've no idea how many orders it checks, but login to your WHMCS Client area and there is a link at the bottom of the page.

 

By the way, your site has been down for a few hours now...

[Tech Entrance]

I've not had a problem without phone verification turned on so have no reason to change. It has blocked alot of fraud orders as it is.

 

I've no idea how many orders it checks, but login to your WHMCS Client area and there is a link at the bottom of the page.

 

By the way, your site has been down for a few hours now...

 

I have read some negative feedbacks about phone check here so won't use it. I will check the link in WHMCS client area to get to Maxmind

 

Yeah it's on FDCservers and they have electrical maintenance that was announced 3 days ago and expected downtime should be 3-5 hours as mentioned in the announcement.

 

http://www.webhostingtalk.com/showthread.php?t=670157

 

Thanks for the info you gave to me.

[othellotech]

we have ours set to 2.1 (require telephone) and 4.5 (block) and it stops all but the most determined frauster

it has on a few occasions blocked real order (who've then rung up to tell us) but thats rare- almost always because *they* have provided an invalid phone number

 

not every fraud order will get the detail - most just close their browser when they find out you're validating the details, so the callback from maxmind doesnt work

[SiCkShOt]

Yeah south affrica is a * country. They want to get americans money and they'll do it anyway possible. From mass emailing from your server. Or to putting up a site to get Americans information. I'm actually typing a paper on this for my school. The FBI and the rest of the american government are trying to do the best they can. But its just so hard to take care of this problem especially where it is located. But if YOUR server techs are accepting this order then I would tell them not to maybe check all the IP's when they sign up just to be safe. Going out of your way might keep your self out of trouble.

 

Good luck!

[scurrell]

Yeah south affrica is a * country. They want to get americans money and they'll do it anyway possible.

 

We've had no problems with South African clients.

 

The other African states/countries, on the other hand.... :evil:

[SiCkShOt]

Ok let me reword what I have said. AFRICA especially Nigera.

[Daniel]

Nigeria is nowhere near South Africa

[neobug103]

Well the problem isn't that the techs are accepting the orders. Rather we have instant domain registration on to keep our current clients happy as they are domain-happy.

 

We have had several signups from south africa, all which have resulted in chargebacks and all had a low fraud score and therefore we are wasting money on fraudulent domain purchases constantly. Does anybody know if we can override either WHMCS or Maxmind to block South Africa signups and give them the message that is shown if maxmind determines it is a fraudulent signup?

[Adam]

Hey,

 

Just a reminder, Maxmind is only a tool. No tool or script in the world can ever catch fraud.

 

Your best bet is to manually verify an order to help protect you from chargebacks.

 

 

From,

Adam

[lynnette]

Well the problem isn't that the techs are accepting the orders. Rather we have instant domain registration on to keep our current clients happy as they are domain-happy.

 

We have had several signups from south africa, all which have resulted in chargebacks and all had a low fraud score and therefore we are wasting money on fraudulent domain purchases constantly. Does anybody know if we can override either WHMCS or Maxmind to block South Africa signups and give them the message that is shown if maxmind determines it is a fraudulent signup?

 

With enom (not sure about the others) you have five days on a lot of tld's to get a refund on the domain name if its fraud.

[polarbear]

I guess you could block the entire South-African IP space in firewall. But it wouldn't be a 100% secure solution, as some might be using IP-addresses from within a PI space, which basically is geographically independent.

 

Secondly, it would block existing customers being in the area as well.

[Frankc]

Yeah south affrica is a * country. They want to get americans money and they'll do it anyway possible. From mass emailing from your server. Or to putting up a site to get Americans information. I'm actually typing a paper on this for my school. The FBI and the rest of the american government are trying to do the best they can. But its just so hard to take care of this problem especially where it is located. But if YOUR server techs are accepting this order then I would tell them not to maybe check all the IP's when they sign up just to be safe. Going out of your way might keep your self out of trouble.

 

Good luck!

 

Maybe you should focus on your homework if you don't even know where or what South Africa is.

 

During 6 years of hosting we get almost NO fraud orders from South Africa and a few from UK and USA signups.

 

The same apply to spam where the majority of spam in the world originate from USA and Japan.

[cyberneticos]

I would say that most fraudulent orders come from Argentina and Colombia. The melting pot for wanna-be hackers.

[Frankc]

And Brazil

 

(And if I want to be as ignorant as the other writer I could therefore said it's USA because it's from the same continent)

 

South Africa have it's problems but online fraud is not one of them. (To be really honest I suspect it's because other crime is MUCH easier, faster and profitable than online crime while being (internet) educated is not a strong point amongst our criminals)

[black.hat]

No idea why it came out so small..

 

Fraud Order - Click Here

 

Maxmind Settings - Click Here

 

We don't bother with the telephone verification, I've heard some people have problems with it.

 

Daniel can you re-upload the screen shoots of your setting please?

i wanna check them too

 

Thanks!