neobug103 Posted February 7, 2008 Share Posted February 7, 2008 I continue to see orders being approved by my dumb techs that are from south africa. I have the option in maxmind to block high risk countries, does maxmind not consider south africa a high risk country or what!? 0 Quote Link to comment Share on other sites More sharing options...
Tech Entrance Posted February 8, 2008 Share Posted February 8, 2008 Why not block by country ? 0 Quote Link to comment Share on other sites More sharing options...
othellotech Posted February 9, 2008 Share Posted February 9, 2008 SA/ZA isnt a high-risk country, no. We've seen very little fraud or even attempted fraud from there and have quite a few happ South African clients. Have you tried blocking proxies - the only attempted fraud orders I've seen from there have all been through proxies. 0 Quote Link to comment Share on other sites More sharing options...
Tech Entrance Posted February 9, 2008 Share Posted February 9, 2008 SA/ZA isnt a high-risk country, no.We've seen very little fraud or even attempted fraud from there and have quite a few happ South African clients. Have you tried blocking proxies - the only attempted fraud orders I've seen from there have all been through proxies. I'm thinking of using maxmind but want to know if you see some kind of verification confirmation in order page in admin area telling me that this order passed fraud check ? Is it instant or takes time so order stays pending (client doesn't get account information) until verification is complete ? Where to decide what countries to block, WHMCS or maxmind account ? an overview of your experience with maxmind+WHMCS will be appreciated. 0 Quote Link to comment Share on other sites More sharing options...
PPH Posted February 9, 2008 Share Posted February 9, 2008 You get a nice block on the order page with all the details of the check Orders function normally if the check has passed. I guess it gets marked as fraud if it doesn't? We haven't had one fail yet since turning it on so we can't say how it handles a fail! 0 Quote Link to comment Share on other sites More sharing options...
Tech Entrance Posted February 9, 2008 Share Posted February 9, 2008 You get a nice block on the order page with all the details of the check Orders function normally if the check has passed. I guess it gets marked as fraud if it doesn't? We haven't had one fail yet since turning it on so we can't say how it handles a fail! Nice screen shot man. Now can you share screen shot of how you set it in WHMCS ? mainly those values MaxMind Fraud Risk Score Telephone Fraud Score Also do you activate phone verification ? 0 Quote Link to comment Share on other sites More sharing options...
Daniel Posted February 9, 2008 Share Posted February 9, 2008 Here's a screenshot of a Fraud order. The client doesn't get to the payment gateway so obviously no details are sent to them regarding the account. Fraud checking is pretty much instant, i've not had anyone report a delay in their order. 0 Quote Link to comment Share on other sites More sharing options...
Tech Entrance Posted February 9, 2008 Share Posted February 9, 2008 Daniel, Your thumb is so small. can you upload it on any image hosting site instead ? want to see full size do you have phone verification enabled ? can you share screen shot of MAxmind config in your WHMCS ? Thanks 0 Quote Link to comment Share on other sites More sharing options...
Daniel Posted February 9, 2008 Share Posted February 9, 2008 No idea why it came out so small.. Fraud Order - Click Here Maxmind Settings - Click Here We don't bother with the telephone verification, I've heard some people have problems with it. 0 Quote Link to comment Share on other sites More sharing options...
Tech Entrance Posted February 9, 2008 Share Posted February 9, 2008 Thanks Daniel. that was a great post I think you should activate phone verification as well. should be useful because a fraudster won't ever give you his phone number Btw, how to get the free Maxmind account that comes with WHMCS ? and how many orders can it check before it expires ? 0 Quote Link to comment Share on other sites More sharing options...
Daniel Posted February 9, 2008 Share Posted February 9, 2008 I've not had a problem without phone verification turned on so have no reason to change. It has blocked alot of fraud orders as it is. I've no idea how many orders it checks, but login to your WHMCS Client area and there is a link at the bottom of the page. By the way, your site has been down for a few hours now... 0 Quote Link to comment Share on other sites More sharing options...
Tech Entrance Posted February 9, 2008 Share Posted February 9, 2008 I've not had a problem without phone verification turned on so have no reason to change. It has blocked alot of fraud orders as it is. I've no idea how many orders it checks, but login to your WHMCS Client area and there is a link at the bottom of the page. By the way, your site has been down for a few hours now... I have read some negative feedbacks about phone check here so won't use it. I will check the link in WHMCS client area to get to Maxmind Yeah it's on FDCservers and they have electrical maintenance that was announced 3 days ago and expected downtime should be 3-5 hours as mentioned in the announcement. http://www.webhostingtalk.com/showthread.php?t=670157 Thanks for the info you gave to me. 0 Quote Link to comment Share on other sites More sharing options...
othellotech Posted February 9, 2008 Share Posted February 9, 2008 we have ours set to 2.1 (require telephone) and 4.5 (block) and it stops all but the most determined frauster it has on a few occasions blocked real order (who've then rung up to tell us) but thats rare- almost always because *they* have provided an invalid phone number not every fraud order will get the detail - most just close their browser when they find out you're validating the details, so the callback from maxmind doesnt work 0 Quote Link to comment Share on other sites More sharing options...
SiCkShOt Posted February 11, 2008 Share Posted February 11, 2008 Yeah south affrica is a * country. They want to get americans money and they'll do it anyway possible. From mass emailing from your server. Or to putting up a site to get Americans information. I'm actually typing a paper on this for my school. The FBI and the rest of the american government are trying to do the best they can. But its just so hard to take care of this problem especially where it is located. But if YOUR server techs are accepting this order then I would tell them not to maybe check all the IP's when they sign up just to be safe. Going out of your way might keep your self out of trouble. Good luck! 0 Quote Link to comment Share on other sites More sharing options...
scurrell Posted February 11, 2008 Share Posted February 11, 2008 Yeah south affrica is a * country. They want to get americans money and they'll do it anyway possible. We've had no problems with South African clients. The other African states/countries, on the other hand.... :evil: 0 Quote Link to comment Share on other sites More sharing options...
SiCkShOt Posted February 11, 2008 Share Posted February 11, 2008 Ok let me reword what I have said. AFRICA especially Nigera. 0 Quote Link to comment Share on other sites More sharing options...
Daniel Posted February 17, 2008 Share Posted February 17, 2008 Nigeria is nowhere near South Africa 0 Quote Link to comment Share on other sites More sharing options...
neobug103 Posted February 27, 2008 Author Share Posted February 27, 2008 Well the problem isn't that the techs are accepting the orders. Rather we have instant domain registration on to keep our current clients happy as they are domain-happy. We have had several signups from south africa, all which have resulted in chargebacks and all had a low fraud score and therefore we are wasting money on fraudulent domain purchases constantly. Does anybody know if we can override either WHMCS or Maxmind to block South Africa signups and give them the message that is shown if maxmind determines it is a fraudulent signup? 0 Quote Link to comment Share on other sites More sharing options...
Adam Posted February 29, 2008 Share Posted February 29, 2008 Hey, Just a reminder, Maxmind is only a tool. No tool or script in the world can ever catch fraud. Your best bet is to manually verify an order to help protect you from chargebacks. From, Adam 0 Quote Link to comment Share on other sites More sharing options...
lynnette Posted March 1, 2008 Share Posted March 1, 2008 Well the problem isn't that the techs are accepting the orders. Rather we have instant domain registration on to keep our current clients happy as they are domain-happy. We have had several signups from south africa, all which have resulted in chargebacks and all had a low fraud score and therefore we are wasting money on fraudulent domain purchases constantly. Does anybody know if we can override either WHMCS or Maxmind to block South Africa signups and give them the message that is shown if maxmind determines it is a fraudulent signup? With enom (not sure about the others) you have five days on a lot of tld's to get a refund on the domain name if its fraud. 0 Quote Link to comment Share on other sites More sharing options...
polarbear Posted March 1, 2008 Share Posted March 1, 2008 I guess you could block the entire South-African IP space in firewall. But it wouldn't be a 100% secure solution, as some might be using IP-addresses from within a PI space, which basically is geographically independent. Secondly, it would block existing customers being in the area as well. 0 Quote Link to comment Share on other sites More sharing options...
Frankc Posted September 17, 2009 Share Posted September 17, 2009 Yeah south affrica is a * country. They want to get americans money and they'll do it anyway possible. From mass emailing from your server. Or to putting up a site to get Americans information. I'm actually typing a paper on this for my school. The FBI and the rest of the american government are trying to do the best they can. But its just so hard to take care of this problem especially where it is located. But if YOUR server techs are accepting this order then I would tell them not to maybe check all the IP's when they sign up just to be safe. Going out of your way might keep your self out of trouble. Good luck! Maybe you should focus on your homework if you don't even know where or what South Africa is. During 6 years of hosting we get almost NO fraud orders from South Africa and a few from UK and USA signups. The same apply to spam where the majority of spam in the world originate from USA and Japan. 0 Quote Link to comment Share on other sites More sharing options...
cyberneticos Posted September 17, 2009 Share Posted September 17, 2009 I would say that most fraudulent orders come from Argentina and Colombia. The melting pot for wanna-be hackers. 0 Quote Link to comment Share on other sites More sharing options...
Frankc Posted September 17, 2009 Share Posted September 17, 2009 And Brazil (And if I want to be as ignorant as the other writer I could therefore said it's USA because it's from the same continent) South Africa have it's problems but online fraud is not one of them. (To be really honest I suspect it's because other crime is MUCH easier, faster and profitable than online crime while being (internet) educated is not a strong point amongst our criminals) 0 Quote Link to comment Share on other sites More sharing options...
black.hat Posted October 11, 2009 Share Posted October 11, 2009 No idea why it came out so small.. Fraud Order - Click Here Maxmind Settings - Click Here We don't bother with the telephone verification, I've heard some people have problems with it. Daniel can you re-upload the screen shoots of your setting please? i wanna check them too Thanks! 0 Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.