Well we finally got our first fraud order ^_^

I woke up this morning, checked my email, and got excited at a new order notification. I log into WHMCS to find that the order has been marked as fraud.

I look at the domain and see it looks suspicious. Out of curiosity, I visited it in my browser and it turned out to be a torrent site. I cancelled the order (it never made it to the payment process anyways because of maxmind's fraud prevention).

It was from an Egyptian IP. They tried the order 2 or 3 times it seems.

I banned their IP till 2010.

Welcome to online ordering! :)

I don't know what type of logs you keep, but whenever we get something like this, we get the origin ISP involved with the appropriate authorities, as well as the financial institution when able. Our clients appreciate the lengths to which we will go when we find things like this.

It never made it to the payment process. The order was marked as fraud and killed before any payment happened.

I notified someone of importance in this situation but they didn't seem to care too much. It is in their hands now.

Short story: It wasn't an issue for me :)

does whmcs include a fraud detection or are you using a 3rd party, if so what is it if you don't mind.

John

WHMCS includes support for varilogix and maxmind.

I am using maxmind.

It will be your first of many, unfortunately. I'm glad to hear you took care of the problem. :)

I got my first fraud order the other day - they ordered the cheapest plan I had at the time - probably to see if they could get by with it. But we quickly cancelled it.

same with me. except the cancellation was done automatically and reviewed by myself afterwards

Welcome to my world... we get at least two or three a week. Usually you can tell by where the ip is located versus where the credit card originates from. If the credit card says John Smith and the ip comes from Morocco, you might have a wee problem.

We even had someone on live chat ask us if we are selling ccs (working credit card numbers) ... it's scary out there. Have a good fraud check in place. We use ihost and we love it.

Country mismatch.. hehe.. An old one.. Have got quiet a few of them till now..

Mhmm, I hate Fraud Orders. They get so annoying, I've had around 20..maybe cause' I have a free hosting company. Well you did what was right :D

We even had someone on live chat ask us if we are selling ccs (working credit card numbers) ... it's scary out there. Have a good fraud check in place. We use ihost and we love it.

:eek: .... I thought these cheaters was more cautious.... but they are asking to companies to buy credit card numbers... I'll never buy anything with my cc.

I'll never buy anything with my cc.

I take it you don't buy anything online then? Credit cards are insured against fraud so I wonder why you won't do this?

Oddly enough the more we post on WHT, the more fraud orders we seem to get.

Gotta love the Texas IP, with a NJ address with a iowa phone number

...or an address that actually matches the phone number...but in a completely different name.

Oddly enough the more we post on WHT, the more fraud orders we seem to get.

Gotta love the Texas IP, with a NJ address with a iowa phone number

Yes I also agree - I have actually had a classic incidence where the scammer actually -called- us from their home country! The quality was so terrible I could not make out a single word and his accent did not help either.

He asked why the account didn't go through and I simply said that it was strange that the credit card account holder's address said somewhere in Chicago, but the IP address was from Romania. I then pointed out that I found it puzzling that the caller's phone number was from Belgium!

He then tried a few more fraud orders before giving up (I hope forever).

Cool part is the phone call was for nearly 20 minutes and I reside in South Africa, so the attempt to make the order go through via the phone must have costed more than the actual order!

WHMCS includes support for varilogix and maxmind.

Does this mean the support is built into WHMCS or does it have to be enabled by signing up for varilogix and maxmind services?

it means it has builtin support for using maxmind/varilogix.

They have a deal where you can get free membership (of limited amount and without phone verification) to maxmind and use it. Not sure about varilogix.

One more reason why phone verification has to be in place. Some time ago i used to get orders from $5.000 to $10.000 / month, none of them could be verified by phone.

Just to verify, as i'm not sure the point of my thread was brought out clearly,

This fraud order did NOT succeed as we had the appropriate checks in place. This was more of a milestone post of sorts. Just letting everyone know that we had our first fraud attempt :)

understood :) more will come is just the way it is.

I hate fraudsters! I really do!

it means it has builtin support for using maxmind/varilogix.

They have a deal where you can get free membership (of limited amount and without phone verification) to maxmind and use it. Not sure about varilogix.

Thanks for clarifying this.

Well we finally got our first fraud order ^_^

I woke up this morning, checked my email, and got excited at a new order notification. I log into WHMCS to find that the order has been marked as fraud.

I look at the domain and see it looks suspicious. Out of curiosity, I visited it in my browser and it turned out to be a torrent site. I cancelled the order (it never made it to the payment process anyways because of maxmind's fraud prevention).

It was from an Egyptian IP. They tried the order 2 or 3 times it seems.

I banned their IP till 2010.


aww! that's really so bad!! these days ID theft is sothing that happens a lot cause of the trojans,spaywares and other stuffs
no body can shop through the internet safe..:mad:

ive had a few fraud orders in thepast. unfortunately it seems to be something that is happening more and more often.

You wont beleive this, but when i started of my webhosting business i got a fraud order on the 3rd DAY!!!
yes thats right,,,,3rd DAY
some romanian had decided to sign up...and he gave his correct phone number and address!!!
just his paypal showed a usa address...
i called him up for "verification", and asked him a few questions..
and guess what...it was that guy...i shouted at him and asked him to stay away from my website...else he'd be reported to the police..(i know it is unprofessional to deal in such a way...but what the hey...he was a scammer after all)...the bum wasn't using a proxy either..!!!
it did work and i never saw him making fraud orders again:D

Edit: the paypal he used got limited and the funds got taken back a few hours after i called up

Fraud orders are such a pain. We manually verify all our orders and *most* of the time we can avoid letting fraud orders by but it does happen from time to time. Modernbill does a decent job of a preliminary fraud check and the maxmind emails are helpful but we usually check and activate orders well before we get any emails from maxmind.

Just an FYI to all hosts. We also had a fraud order, not specifically us, but a partner of ours.

IP: 81.199.179.87

Sir/Madam,

We wish to congratulate you over your email success in our computer
balloting held on 17th October 2007. This is a Millennium Scientific
Computer Game in which email addresses were used. It is a promotional
program aimed at encouraging internet users; therefore you do not need to buy
ticket to enter for it. You have been approve for the star prize of
???987:000:00 (Nine Hundred And Eighty Seven Thousand Euros Only).

To claim your winning prize you are to contact the appointed claim
agent as soon as possible for the immediate release of your winnings with
the following informations below:

Your Full Name..............................
Home And Office Telephone Numbers...........
Mobile Telephone Number....................
Fax Number.................................


Tanny Fraze
LS TRUST AGENCY.
45 Tothill Street, Westminster, London, SW1 H 9LA. United Kingdom.
Email: mr.tannyfraze@yahoo.es
He send out spam emails and he also put his scam page up also........!

Our partner has stopped automated sign ups, due to this.

That's why watching your orders daily is so important nowadays. After your biz take off and have more orders everyday you won't be able to handle it and will eventually go with fraud detection like Maxmind.

Oddly enough, when we first opened our billing system to the public, our first order was fraud. Vietnam IP (and Password) with a Indiana address.

Oddly enough, when we first opened our billing system to the public, our first order was fraud. Vietnam IP (and Password) with a Indiana address.

Hi,

You're not alone - our first one was also fraud - if I recall the IP address was from Romania.