WHMCS - Custom 'fraud' blocks module

[MartinD]

I was sure I had something like this coded before but I can't for the life of me find the damn code so I'm asking if anyone else has come up with this or knows someone that has.

Basically, a simple module that allows you to enter certain expressions, text, patterns that the system will automatically parse and check against new orders. This would then mark the order as fraud/cancelled(whatever you chose) if the order matches any of the 'rules' you have set up in this module.

So, some examples would be:

- "ilovespam" appearing anywhere in the hostname provided

- Any orders coming from AS36352

- Any orders coming from.. France

- if the email address '[email protected]' is used

I'm pretty sure something like this must exist in some form.. but can I find it?

 

[catatonic]

- Any orders coming from.. France

:lol: Any reason for singling out France?

 

[MartinD]

Yeah, it's full of French people.

 

[TruvisT]

Can we also do city? I've seen certain cities be used for ordering dedicated servers for spammers that we eventually did extensive manual verifications for any order using that city.

 

[Wintereise]

Can we also do city? I've seen certain cities be used for ordering dedicated servers for spammers that we eventually did extensive manual verifications for any order using that city.

+1, I extremely dislike Miami for this reason.

(http://www.spamhaus.org/rokso/evidence/ROK8847/yair-shalev/main-information), etc.

 

[TruvisT]

+1, I extremely dislike Miami for this reason.

(http://www.spamhaus.org/rokso/evidence/ROK8847/yair-shalev/main-information), etc.

Truth. We had a crazy ton of spam signups come out of Miami.. like insane.

 

[SVMPhill]

This would be more suited to a hook don't you think? Maybe this http://docs.whmcs.com/Hooks:RunFraudCheck (not 100% sure if this is the correct hook).

You can then do the logic in the hook to search for whatever details you like and then run an action if anything in your shitlist list is found. For example just mark it as fraud and send an email to the client that it's under investigation using the internal API mail function etc.. etc..

 

[MannDude]

Would also be nice to whitelist customers.

Sometimes someone is flagged for review, so you review them. They submit docs, verification, whatever. They place a new order later and have to ticket in. It's confusing to the few legit customers from high risk places you may get, especially when they ticket in and you have to explain that they are indeed already verified, though you screen all orders from their country (Like Vietnam). "Never mark this customer as fraud" would be a good feature as well.

 

[MartinD]

In WHMCS you can have the fraud check bypassed for folk who are already a customer

 

[devonblzx]

Nothing like that specifically, but we use MaxMind and Fraudrecord and it works pretty well for weeding out most illegitimate signups.  Along with that we have our own script for proxy detection and manually review each new customer's information to look for specific items that correlate with fraud.  After doing this for 8 years you get pretty good at recognizing bad orders.  Automated systems is no replacement for a quick manual review.  It usually only takes a few minutes to review an order.

If you aren't charging enough to spend <5 minutes on a new VPS customer, then you need to re-think your strategy.

You can still do manual reviews with instant activation.  Most hosts have 24 hour support anyways so just train and delegate the responsibility to your support staff for what to look for in new orders and authorize them to flag new orders.

 

[Enterprisevpssolutions]

Have you looked at using other fraud checking tools like www.fraudrecord.com they have a module for whmcs

 

[MartinD]

Yes but that has nothing at all to do with what I was after

 

[Kihi]

@MartinD

Have you ever thought of using one of the WHMCS hooks on account creation? I would personally recommend it. Even if it's just a simple query to a local database that returns true / false. 

 

[CentralHosts]

I would be very interested in this as we currently look at every order manually before processing due to the high amounts of spam. 

 

[coreysam]

FraudLabs Pro also works well with transaction screening to catch high risk transactions. You can fine-tune the rules or criterias based on your business need. If you just want to block certain countries, try country blocker then.

https://www.whmcs.com/appstore/3330/IP2Location-Country-Blocker.html

 

[Aldryic C'boas]

You necro'd a pretty old thread there, Corey.  Pretty much resolved anyways, I ended up writing a custom script for Martin to handle this.

 

[fixidixi]

@Aldryic:

Well the guy only registered to advertise that stuff so.. no response expected..

 

[Aldryic C'boas]

Yeah, that's pretty much what I figured.

 

[winnervps]

fraudrecord.com is good thing but they didn't filter order (just a suggestion, and order is still being received)

fraudlabspro.com, you could try it. I was trying it but somehow they did filtered some valid customers (of my country), due to the fact that my country seems to be in their 'suspicious database' (so i left it behind )

 

[Aurimas]

Orders coming from [SIZE=11pt]Albania, Bangladesh, Algeria, Egypt, Indonesia, Iran, Morocco, Monaco, Nigeria, Pakistan, Romania, Somalia, Syria, Vietnam.[/SIZE]