Results 1 to 25 of 25
  1. #1
    Join Date
    Mar 2007
    Location
    DataCenter
    Posts
    853

    Lightbulb Getting Lots Of Fraud Orders - Pls Suggest what to do

    Hello

    Im getting lots of fraud orders

    lots of orders from hacked cc and paypal

    im not getting how to avoid that

    pls help me guys i have 4 case opened in my paypal

    need your precious suggestion

    Thanks in advance
    ProlimeHost - Dedicated Server Hosting & Kvm SSD VPS
    Three Datacenter Location: Los Angeles, Denver & Singapore
    SuperMicro Hardware | Multiple Bandwidth Providers | 24/7 on Site Engineers

  2. #2
    Join Date
    Feb 2007
    Location
    Isle Of Anglesey, UK
    Posts
    1,468
    sign up for maxmind fraud system (you can signup via a link in the whmcs client area I believe its a reduced rate) that once setup should reduce the fraud.

  3. #3
    Join Date
    Feb 2005
    Location
    London, England
    Posts
    969
    Simple – phone verify every order ! cuts out 99%
    Jon Black

  4. #4
    Join Date
    Jun 2001
    Location
    Gotham City
    Posts
    1,852
    1. Manually approve orders, do not provide instant setup if you do.

    2. Check the IPs that place orders for open ports like 80, 8080, 8383 etc common proxy ports. A lot of fraud comes through proxies.

    3. A simple phone call helps

    4. Avoid free email addresses like yahoo, hotmail or gmail. Always ask for an ISP or corporate email address. Allow Hotmail, Gmail, etc as backups only.

    5. Check out the domain they want to host, does it already exist? Is it bogus? Who is it registered to.
    [[ Reyox Communications / USA based cloud servers & support / 9 years of hosting websites ]]
    [[ Affordable ASP.NET4, ColdFusion, PHP & MS-SQL, MySQL, cPanel/WHM & Windows Reseller Hosting + Virtual Private Servers ]]
    (www.reyox.com) - Mention WHT and get a discount on your first month!

  5. #5
    Join Date
    Oct 2002
    Location
    /roof/ledge
    Posts
    28,088
    Quote Originally Posted by ReyoxHosting View Post
    Check the IPs that place orders for open ports like 80...proxy.
    Isn't 80 the standard port for http? Seems to me that every order would start with that one.
    Your one stop shop for decentralization

  6. #6
    Join Date
    Jan 2008
    Location
    Sacramento, CA
    Posts
    3,657
    I use maxmind and manually call any suspicious orders that maxmind spits out. And as HostOrca says, you can get a discount if you're a whmcs customer.
    hostingDifferent---We're hostingDifferent.™
    Premium, Managed and DIY WordPress hosting DONE RIGHT.
    Find out what SERVICE really means!--We're hostingDifferent.

  7. #7
    Join Date
    Jun 2001
    Location
    Gotham City
    Posts
    1,852
    Quote Originally Posted by bear View Post
    Isn't 80 the standard port for http? Seems to me that every order would start with that one.
    Yes 80 is for web, a normal broadband user who is placing an order for hosting from his home pc would not have port 80 open usually. If port 80 is open, there's a good chance of it being a webbased proxy
    [[ Reyox Communications / USA based cloud servers & support / 9 years of hosting websites ]]
    [[ Affordable ASP.NET4, ColdFusion, PHP & MS-SQL, MySQL, cPanel/WHM & Windows Reseller Hosting + Virtual Private Servers ]]
    (www.reyox.com) - Mention WHT and get a discount on your first month!

  8. #8
    Join Date
    Dec 2005
    Posts
    3,110
    We use maxmind and it's a fantastic tool. Definatley reccomend enabling phone verification for fraud scores over a certain figure.

  9. #9
    Join Date
    Dec 2005
    Posts
    55
    Try maxmind or modern authorize. Fraud Gate is also excellent.
    http://www.webbloged.com - Articles on web design, coding and SEO

  10. #10
    Quote Originally Posted by desilime View Post
    Hello

    Im getting lots of fraud orders

    lots of orders from hacked cc and paypal

    im not getting how to avoid that

    pls help me guys i have 4 case opened in my paypal

    need your precious suggestion

    Thanks in advance
    Always check the ip addresses of the buyer. If the ip does not match with the location that was provided during the sign up process then most likely the transaction is fraudlent.
    Server Management + Support to your hosting clients (unlimited tickets and servers) in one monthly fee.
    Outsourced Support
    | ManageAndSupport.com.

    **We will monitor and harden your server + provide direct support to your hosting customers.**

  11. #11
    I also recommend Maxmind. I recommend you get both services Maxmind offer which is, phone verification, and order form check (check if it uses a proxy, if the billing address is fake or not, gives overall score..etc).


  12. #12
    Always do phone verification. Works 100% for me.

  13. #13
    Join Date
    Jul 2007
    Posts
    32
    phone verification + Maxmind anti-fraud = ~100% protection Thumbs up for Maxmind, though. They can not be cheated that easy..

  14. #14
    Join Date
    Apr 2008
    Location
    Washington, DC
    Posts
    18
    I also give my vote to MaxMind -- that software is excellent.
    Brett G. ** www.darkstarllc.com
    DarkStar Communications ** Ventrilo ** Game Servers ** TeamSpeak ** Reseller Accounts

  15. #15
    Join Date
    Oct 2000
    Location
    Toronto
    Posts
    1,110
    Phone verification is probably the best.

  16. #16
    Join Date
    Jul 2007
    Posts
    41
    I should verify via phone also, and also a decent IP check.

  17. #17
    Join Date
    Aug 2001
    Posts
    287
    We get about 3-8 fraud orders a day. Thankfully to Maxmind's fraud + automated phone verify we are able to filter almost 90% of them.

    However, we have been seeing some orders slipping through. The fraudsters are getting pretty smart now. They actually will buy the Voip phone service which are US based phones to get passed the automated phone verify. Pretty soon if they keep getting smarter we might have some issues.

  18. #18
    Join Date
    May 2006
    Posts
    238
    it's getting bad, now you cant trust email, billing address, geoIP, VOIP/phone #, but that's the price you gotta pay to be a 'budget' host.

    when you start competing for price at the 'low-end', you should expect to see 'alot' of fraud.

    there will always be fraud at all levels, but the shoestring budget hosts get the majority of it.

    it's always great to see 'orders' for new service coming in, but when it's 10, 20 30%+ fraud, it's not really worth it when there are soo many legitimate business customers out there that are not going to hack, spam, etc.

    It seems like everyone is competing for the best price, then best price goes out of business and every host follows them into the blackhole after they have been hack'd, crack'd and compromised.

    It comes down to lack of planning and management. When the 'budget' host is overwhelmed with hackers, spam, fraud, chargebacks, complaints, support and cant focus on the biz, the 'planners' are worried about how to setup all the legit customers in a timely fashion and start the billing process to make money.

    Look at every 'big' host out there, at whatever level you are at and NONE of the big boys are selling cheap for a reason.

    You can make more money by not dealing with the crap and raising your prices and providing a service.

  19. #19
    Join Date
    May 2008
    Location
    Canada
    Posts
    985
    thanks for all your answer.
    UnderHost.comOffshore Hosting Solutions and USA/Canadian based servers.
    24/7 Rapid Support / 99.9% Uptime Guarantee / Shared / Cloud / VPS / Dedicated Servers
    Managed OnApp CloudUSA Cloud Virtual Datacenter - Dedicated and Scalable Resources
    Hong Kong - Netherlands - Canada - Caribbean - United States - Russia

  20. #20
    Join Date
    Mar 2006
    Location
    Reston, VA
    Posts
    3,131
    Quote Originally Posted by prolimehost View Post
    Hello

    Im getting lots of fraud orders

    lots of orders from hacked cc and paypal

    im not getting how to avoid that

    pls help me guys i have 4 case opened in my paypal

    need your precious suggestion

    Thanks in advance
    You were blatantly looking for a datacenter where you can host your warez clients in the colocation forum not to long ago. What did you really expect out of them?
    Yellow Fiber Networks
    http://www.yellowfiber.net : Managed Solutions - Colocation - Network Services IPv4/IPv6
    Ashburn/Denver/NYC/Dallas/Chicago Markets Served zak@yellowfiber.net

  21. #21
    Join Date
    Nov 2007
    Location
    Dallas, TX
    Posts
    9,064
    Quote Originally Posted by ZL6net View Post
    when you start competing for price at the 'low-end', you should expect to see 'alot' of fraud.
    Although this sounds counter-intuitive, it seems very true. While one might expect that fraudsters would use stolen funds to purchase premium service, they do tend to stick to the budget offerings.

    -mike
    Mike G. - Limestone Networks - Account Specialist
    Cloud - Dedicated - Colocation - Premium Network - Passionate Support
    DDoS Protection Available - Reseller Program @LimestoneInc - 877.586.0555

  22. #22
    Join Date
    Mar 2008
    Location
    Chicago, IL
    Posts
    331
    Quote Originally Posted by ReyoxHosting View Post
    1. Manually approve orders, do not provide instant setup if you do.

    2. Check the IPs that place orders for open ports like 80, 8080, 8383 etc common proxy ports. A lot of fraud comes through proxies.

    3. A simple phone call helps

    4. Avoid free email addresses like yahoo, hotmail or gmail. Always ask for an ISP or corporate email address. Allow Hotmail, Gmail, etc as backups only.

    5. Check out the domain they want to host, does it already exist? Is it bogus? Who is it registered to.
    Those are all great techniques that I use as well. The only thing I disagree with is number three. This is a Catch 22, if you require a "corporate" email address, most likely it will be @thedomaintheyarehostingwithyou.com. This can cause a problem if their email goes down for any reason. Requiring an ISP email address is a problem as well, because people switch ISPs all the time. Personally, for any important email, except confidential work email, I use gmail. No one has ever denied me service because of it and presently free email accounts are the most prevalent by far, we as hosts just need to accept this and use other methods of verification.
    Chris Larkin
    Senior Hosting Consultant
    SingleHop Managed Dedicated Servers
    http://singlehop.com

  23. #23
    Join Date
    Sep 2004
    Location
    US
    Posts
    29
    Phone verification is the best. However if you think it is expensive then always check the billing address and the IP location. The best method would be to discard the orders that fail IP and billing location check and call those that match. This would decrease 99% of the frauds.

  24. #24
    Join Date
    Jun 2001
    Location
    Gotham City
    Posts
    1,852
    Quote Originally Posted by SingleHopChris View Post
    Those are all great techniques that I use as well. The only thing I disagree with is number three. This is a Catch 22, if you require a "corporate" email address, most likely it will be @thedomaintheyarehostingwithyou.com. This can cause a problem if their email goes down for any reason. Requiring an ISP email address is a problem as well, because people switch ISPs all the time. Personally, for any important email, except confidential work email, I use gmail. No one has ever denied me service because of it and presently free email accounts are the most prevalent by far, we as hosts just need to accept this and use other methods of verification.
    We accept free addresses, all of them infact, but pay extra caution if conditions like IP addresses look fishy. Extra phone verification in such circumstances does the trick
    [[ Reyox Communications / USA based cloud servers & support / 9 years of hosting websites ]]
    [[ Affordable ASP.NET4, ColdFusion, PHP & MS-SQL, MySQL, cPanel/WHM & Windows Reseller Hosting + Virtual Private Servers ]]
    (www.reyox.com) - Mention WHT and get a discount on your first month!

  25. #25
    does maxmind can check fraud payment that using paypal?
    HalfDedi.com • Half Dedicated Half Price
    We provide affordable VPS hosting solution Singapore datacenter

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •