Web Hosting Talk : Web Hosting Main Forums : Running a Web Hosting Business : Fraud VPS Signups

[Dave - Just199]

3 of our signups today turned out to be fraud, paypal reviewed each of the transactions and passed them.

Now for the weird part, They all had variants of the same hostname which the letters karok in them. How would anything think that they wouldn't draw attention to themselves. I created all 3 vps accounts just to make sure I could tie them together and they were all logged into by the same IP address in Vietnam. All of the signups were from separate US ISP's. All of the phone numbers are disconnected. We went ahead and cancelled the accounts and notified paypal after returning the payments.

113.169.71.** was the ip that accessed all 3 accounts.

Lets keep talking about these fraud signups like we were doing with the shared hosting, it really seemed to help some people identify which signups might be fraud.

[XeHSean]

You should look into getting an auto-telephone verification system that calls the number supplied and asks the user to verify the order. These types of systems drastically reduce the amount of fraudulent orders that get through your system

[Dave - Just199]

We prefer manual verification, the only reason we activated the account (not the vps) was to log the ip that accessed the VPS control panel. We tried a lot of automated systems but in the end manual verification has always worked better for us.

[premium20]

Dave,

You really did a good job here. It seems the scammer did what ever he could to get the VPS and the fact that you logged his IP and got his location helped control fraud. I am wondering if certain countries that contribute to a lot of fraudulent signups must be banned altogether from accessing the hosting site.But then, that is my opinion.

[tonycwh]

Nice thanks for the heads up. I always though Paypal was bullet proof.

[vpsMachine]

Hi, It might be worth considering using Maxmind to assist with the Fraud Detection ( I believe that they do a free version) as it takes a lot of the guess work out of the game. You can still have a manual intervention in any case so you still get have the final say.

Good Luck

V

[NetDepot - Terrence]

We need more providers to post IPs of fraudulent signups and or chargebackers <--- is that a word lol?

[bohemienne]

Unluckly there are a lot of this kind of frauds sign-up. Anyway, most of the time, you can recognize them as you did.

I actually also use manual verification as I believe is the best =)

[coloheart]

Try some security measures like

1. IP and Location check
2. Phone verification
3.Billing address and IP check

This will reduce if not eliminate fraud transactions.

[tanfwc]

The best is the request government ID or driving license to match the name during the sign up. I'm sure it will eliminate all possible fraud signup.

[Sumeet]

Paypal id really a safe way to pay online ...

[Sturdy Aric]

Originally Posted by Dave - Just199

We prefer manual verification, the only reason we activated the account (not the vps) was to log the ip that accessed the VPS control panel. We tried a lot of automated systems but in the end manual verification has always worked better for us.

I agree with the Manual verification part but you could just add in some more beef to you're sign up part with the telephone verification system. If you use WHMCS as a billing system and then add MaxMind they allow you to add this Feature in.

Thanks for letting us know about these orders and we will watch out for them!

[quantumphysics]

Originally Posted by THAMAN

We need more providers to post IPs of fraudulent signups and or chargebackers <--- is that a word lol?

Except they're probably almost exclusively third world countries where entire city-isps might be behind a single caching proxy, NAT'd, or ridiculously dynamic in some way

[azaz24]

Nasty Fraud


You can check if the IP address matches the home address
http://www.geoiptool.com/


I agree with THAMAN he said:-
We need more providers to post IPs of fraudulent signups and or chargebackers.
Also
Domains, Emails and name they use.