Antifraud is a module that can help you lower the risk of fraudulent payments being made at your store. The basic idea is that Antifraud service checks up whether the billing address provided by a customer in his order corresponds to the location of the IP address of the computer this customer used to place the order at your online store. Based on the results of this check-up a value called Fraud risk factor is produced that allows the system to evaluate the risk of fraud and to place a note about it into order details. Normally, Fraud risk factor is a number from 1 to 10 (the greater the number, the higher the probability of fraud from this IP address). You can define how great Fraud risk factor should be for an order to be evaluated as fraudulent. To do so, you need to set the so-called Fraud risk factor threshold value. For example, if you set the Fraud risk factor threshold value to 5 (which corresponds to 50% fraud), all the orders placed at your store with Fraud risk factor rates from 6 to 10 will not be processed automatically - instead, they will get the status 'Queued' and will be put off for manual processing, so you will be able to decide wether you want to process them or not. During manual order processing you will be able to see the order details and Antifraud checking results. Then, if you agree with Antifraud service that the order is fraudulent, you can report the IP address from which the order originated to the Antifraud service server as a source of fraudulent orders. This will help to avoid further fraudulent orders coming from this IP.
If you would like to use Antifraud module, activate it in the 'Modules' section of the admin zone (can be accessed by clicking on Modules in the Administration menu).
Please note that Antifraud is a subscription service, which means that it is not enough just to activate the module: you need Antifraud module subscription key to make it work. So be sure to enter your Antifraud module subscription key into the corresponding field on the General settings -> Modules options page of the admin zone and click on Save to activate the key.
Picture 1: Antifraud options on the 'General settings -> Modules options' page.
Note. Antifraud module subscription key can be obtained via the 'Purchase services' page in your Personal HelpDesk at https://secure.qualiteam.biz.
You can set the 'Antifraud safe distance (km)' (General settings -> Modules options) within which you trust all your prospective customers. If the address provided by your customer on checkout is within this distance from the location of the customer's IP, the order will be processed as non-fraudulent.
For the users outside the safe distance Fraud risk factor functions. If it is greater than the limit specified in the 'Fraud risk factor threshold value (Antifraud module)' field (General settings -> Modules options), ‘Queued’ status will be assigned to the order, which you will have to process manually.
It would be a good idea to specify the so-called 'Order total threshold'. This value is also used by Antifraud service for fraud risk evaluation. In fact, it is a subtotal amount beginning from which an order is considered 'large'. Large orders are a greater risk for a store, so if the subtotal of an order exceeds the value provided in this field, Antifraud server uses an additional coefficient to increase the fraud risk factor of the order.
The results of checking an order by Antifraud service can be found in the 'Antifraud checking result' subsection of the 'Order details' form.
If Antifraud module is turned on at the time of placing the order, the 'Antifraud checking result' section most probably includes:
• Fraud risk factor of the order (a number from 1 to 10),
• Total requests (the total number of requests to Antifraud service you are allowed to make with your subscription key),
• Used requests (the number showing how many requests to Antifraud have already been made).
Sometimes the result returned by Antifraud may include service flags.
Picture 2: Antifraud checking result.
If Antifraud service is unable to provide any information about the IP address used to place the order, you are informed about it by a message of the following contents:
Picture 3: 'No information regarding requested IP is found' message.
Such a message does not necessarily mean fraud, it can be caused by the fact that the customer came to your store from an intranet environment. However, the potential fraud risk of orders, the origin of which is unknown, is very high.
If Antifraud module is turned off when the order gets placed, the order is not checked and the 'Antifraud checking result' section of the order details page displays a warning about it.
Picture 4: 'Order has not been checked' warning.
If, for some reason, the order was not checked by Antifraud, or if you failed to get the check results (for example, because of a connection failure just after the order was placed), you can request another check of the order by Antifraud: just click the Check order in Antifraud service link and your request will be re-sent to Antifraud server. (If the Check order in Antifraud service link does not appear on the page, please make sure Antifraud module is enabled and Antifraud module subscription key is entered on the General settings/Modules options page).
You can also use the IP lookup service. The IP section of the order details page displays the IP address from which the order originated.
Picture 5: IP lookup button.
Clicking on the Lookup button opens a new window containing the 'Lookup address' dialog that allows you to find out more information about the IP address of your customer.
Picture 6: Lookup address dialog.
The 'City', 'State', 'Country' and 'Zip/Postal code' fields in the 'Lookup address' dialog show you the company address set under General settings/Company options. If necessary, you can enter a different address into these fields (for example, the address provided by the customer as his billing address).
The 'IP' field shows the IP address of your customer. Clicking on the Lookup address button allows you to get Antifraud service to find out the factual location of this IP address. The customer's address received from Antifraud service appears below the 'IP' field.
Picture 7: IP address location has been found out.
Clicking on Measure distance allows you to get information about the distance between the location of the IP address of your customer and your company address (or any other known address, specified in the right side of the form).
Picture 8: Distance between the IP address location and your company address has been measured.
If you are sure that the IP address from which the order originated was used by a fraudster, you can report this IP to Antifraud service. Use the 'Send IP' subsection of the order details page to describe the reason why you believe this IP to be a source of fraudulent orders using the provided field, then click on Send.
Picture 9: 'Send IP' subsection of the order details page.
Antifraud service subscription key is valid for a limited number of times. You will receive an e-mail notification when your service key is invalid or expired. You will also see a warning message in the 'Antifraud checking results' subsection of the 'Order details' form.
Picture 3: 'Antifraud service key expired' warning.
Picture 4: 'Antifraud service key is invalid' warning.
If you see one of these warning messages, it is time to order a new Antifraud service subscription key.
Related topics: