WHMCS - Custom 'fraud' blocks module

Discussion in 'Operating a Hosting Business' started by MartinD, Jul 28, 2014.

  1. MartinD

    MartinD Retired Staff Retired Staff Verified Provider

    1,410
    1,278
    May 15, 2013
    I was sure I had something like this coded before but I can't for the life of me find the damn code so I'm asking if anyone else has come up with this or knows someone that has.

    Basically, a simple module that allows you to enter certain expressions, text, patterns that the system will automatically parse and check against new orders. This would then mark the order as fraud/cancelled(whatever you chose) if the order matches any of the 'rules' you have set up in this module.

    So, some examples would be:

    - "ilovespam" appearing anywhere in the hostname provided

    - Any orders coming from AS36352

    - Any orders coming from.. France

    - if the email address '[email protected]' is used

    I'm pretty sure something like this must exist in some form.. but can I find it?
     
    Wintereise and HalfEatenPie like this.
  2. catatonic

    catatonic New Member

    27
    6
    Dec 7, 2013
    :lol: Any reason for singling out France?
     
  3. MartinD

    MartinD Retired Staff Retired Staff Verified Provider

    1,410
    1,278
    May 15, 2013
    Yeah, it's full of French people.

    :p
     
    River, Oliver, matt[scrdspd] and 10 others like this.
  4. TruvisT

    TruvisT Server Management Specialist Verified Provider

    398
    144
    May 16, 2013
    Can we also do city? I've seen certain cities be used for ordering dedicated servers for spammers that we eventually did extensive manual verifications for any order using that city.
     
  5. Wintereise

    Wintereise New Member

    241
    159
    May 16, 2013
  6. TruvisT

    TruvisT Server Management Specialist Verified Provider

    398
    144
    May 16, 2013
  7. SVMPhill

    SVMPhill New Member

    13
    11
    Jun 18, 2013
    This would be more suited to a hook don't you think? Maybe this http://docs.whmcs.com/Hooks:RunFraudCheck (not 100% sure if this is the correct hook).

    You can then do the logic in the hook to search for whatever details you like and then run an action if anything in your shitlist list is found. For example just mark it as fraud and send an email to the client that it's under investigation using the internal API mail function etc.. etc..
     
    MartinD likes this.
  8. MannDude

    MannDude Just a dude vpsBoard Founder Moderator

    5,036
    2,634
    Mar 8, 2013
    MannDude
    Would also be nice to whitelist customers.

    Sometimes someone is flagged for review, so you review them. They submit docs, verification, whatever. They place a new order later and have to ticket in. It's confusing to the few legit customers from high risk places you may get, especially when they ticket in and you have to explain that they are indeed already verified, though you screen all orders from their country (Like Vietnam). "Never mark this customer as fraud" would be a good feature as well.
     
    River likes this.
  9. MartinD

    MartinD Retired Staff Retired Staff Verified Provider

    1,410
    1,278
    May 15, 2013
    In WHMCS you can have the fraud check bypassed for folk who are already a customer :)
     
    MannDude likes this.
  10. devonblzx

    devonblzx New Member Verified Provider

    259
    119
    Oct 31, 2013
    Nothing like that specifically, but we use MaxMind and Fraudrecord and it works pretty well for weeding out most illegitimate signups.  Along with that we have our own script for proxy detection and manually review each new customer's information to look for specific items that correlate with fraud.  After doing this for 8 years you get pretty good at recognizing bad orders.  Automated systems is no replacement for a quick manual review.  It usually only takes a few minutes to review an order.

    If you aren't charging enough to spend <5 minutes on a new VPS customer, then you need to re-think your strategy.

    You can still do manual reviews with instant activation.  Most hosts have 24 hour support anyways so just train and delegate the responsibility to your support staff for what to look for in new orders and authorize them to flag new orders.
     
  11. Enterprisevpssolutions

    Enterprisevpssolutions Article Submitter Verified Provider

    242
    29
    May 22, 2013
    Have you looked at using other fraud checking tools like www.fraudrecord.com they have a module for whmcs
     
  12. MartinD

    MartinD Retired Staff Retired Staff Verified Provider

    1,410
    1,278
    May 15, 2013
    Yes but that has nothing at all to do with what I was after :)
     
  13. Kihi

    Kihi New Member

    5
    0
    Aug 12, 2014
    @MartinD

    Have you ever thought of using one of the WHMCS hooks on account creation? I would personally recommend it. Even if it's just a simple query to a local database that returns true / false. 
     
  14. CentralHosts

    CentralHosts New Member Verified Provider

    15
    1
    Jul 13, 2014
    I would be very interested in this as we currently look at every order manually before processing due to the high amounts of spam. 
     
  15. coreysam

    coreysam New Member

    1
    0
    Dec 16, 2014
  16. Aldryic C'boas

    Aldryic C'boas The Pony

    2,313
    2,652
    Apr 18, 2013
    Aldryic
    You necro'd a pretty old thread there, Corey.  Pretty much resolved anyways, I ended up writing a custom script for Martin to handle this.
     
  17. fixidixi

    fixidixi Active Member

    307
    71
    May 17, 2013
    @Aldryic:

    Well the guy only registered to advertise that stuff so.. no response expected..
     
  18. Aldryic C'boas

    Aldryic C'boas The Pony

    2,313
    2,652
    Apr 18, 2013
    Aldryic
    Yeah, that's pretty much what I figured.
     
  19. winnervps

    winnervps New Member Verified Provider

    62
    6
    Dec 14, 2014
    fraudrecord.com is good thing but they didn't filter order (just a suggestion, and order is still being received)

    fraudlabspro.com, you could try it. I was trying it but somehow they did filtered some valid customers (of my country), due to the fact that my country seems to be in their 'suspicious database' (so i left it behind :( )
     
  20. Aurimas

    Aurimas New Member Verified Provider

    47
    3
    Oct 21, 2013
    Orders coming from [SIZE=11pt]Albania, Bangladesh, Algeria, Egypt, Indonesia, Iran, Morocco, Monaco, Nigeria, Pakistan, Romania, Somalia, Syria, Vietnam.[/SIZE]