Does anyone knows a software package or script that allow automatic user creation after he/her signs in and transaction has been approved by say, revecom (appliaction reads e-mail note and acts according the results)

Thanks

Virginio E. Reis

Which platform?

Check Hsphere control panel offered by psoft.net.

Hey people, does that exist for Plesk PSA (in combination w/ PayPal) too?

Just wondering...

I would not offer automatic account creation.

Lets say they use the thing, put in a fake #, and setup like your largest account offered.

They load it w/ warez / spam, whatever.... serve like crazy all night long during the 4 hours you actually sleep.

You wake up and cancel them, but the damage has already been done.

I'd say once the charge is approved and you have the cash secured - create their account manually.

What if you do that but they upload their site during the 4 hours your asleep.. wouldn't that just mean you are spending your time setting up sites when you could be getting more sleep ;)?

There are some tradeoff with automatic signup and without, this is what I have seen:

With automatic signup:
1) Much easier on admins
2) Some clients like it.
3) Lots of fraud
Ways to protected agains fraud:
Credit card address verification - doesn't work, at all. The cards are stolen with adresses.
Yet, if the IP address of user who signs up is from the country (not that easy to figure out) that the card was issued from 95% of the time it will be fraud.
If there is no domain (subdomain on) that is registered, or domain is transfered, there is
more chances that it is fraud. This is harder to
spot with script, but human usually can spot it.
Such accounts are used for spam, so if you make
your system hard to use for spamming - you will
not get too many of such fraud signups.

With manual signup:
1) Simply by looking at data you can remove 50% of fraud entries
2) By calling back suspicious entires - you can eliminate another 30-40% of fraud - and it will be about 5% of total signups that you will have to look at.
3) If you call back everyone - you will eliminate 99.9% of the fraud cases.
4) Some clients like instant signup, and will not go for moderated - but not many.
5) You have to have someone around the clock moderating signups - and it might be additional expens.


Additional note:
Checking on geographic placement of IP is not that easy, as you cannot simply use IP databases (ARIN and other) as all (at list the Asian one, and I am pretty sure about European) of them have licensing clause that specifically states:
You cannot use it to do georgrapichal placement of IP addresses :(
If anyone know about some other database, that doesn't have such limitations - I would be interested.

Most of the number are out of the blue, and based on my impression from working closely with 150+ hosting companies.

Are you saying that 30-40% of their on-line sign ups are fraud or 5%, and they can reduce that by a third?

I can believe 5%, but not 30% -

Just my $0.02

They can reduce that by 1/3. I think that any bussines that gets 1/3 of the signups - fraud signups will get the merchant accounts suspended within 5 days, and network connection disabled within 2 weeks (due to spam or hack attacks - as that what most of the fraud signups are made for).

I agree all the fraud issue. But, as I said, the account would only be created after the transition approval. If the cutomer is using a fake CC, and the transition is approved, it doesn't natter if the account is created manualy or automatic. He/her can do the same damages

Virginio

phpmanager can do automatic creation of accounts, also with this which is more recommended is that it can create the account and you have to authorize it with the click of a button, the client is then sent all relent info on their account.

You can keep their history on it and also reminds you to invoice customers before due date.

Thanks

Originally posted by reisve
If the cutomer is using a fake CC, and the transition is approved, it doesn't natter if the account is created manualy or automatic. He/her can do the same damagesNo, the point made by those who advocate against automatic account creation is that the approval of a credit card isn't enough to indicate that the transaction isn't fraudulant, but that an actual person reviewing the transaction and account details would be able to identify most of the bad ones.

So it does matter. But as iseletsk said, it's a tradeoff. On your side, since you mention Revecom, could be that they seem to be pretty good at catching fraudulent charges so that might help some as opposed to, say, using your own merchant account and relying simply on AVS.

Well, is either revecom or paypal. Never my own merchant account

Just remember you cant enter any old information, anyone who sets up a auto signup deal will have it only work if the credit card checks out, ofcourse thats not including where the user came from.

One a second note, you could acually setup that part and deny users the ability to auto signup if you do not like where they are comming from. I just did not add that in my script.