Revision as of 13:48, 13 May 2015

MaxMind offers 22 different risk ratings and scores to enable WHMCS and you to decide whether an order is fraudulent. For details about each of the individual checks, see the minFraud White Paper. MaxMind allows you to do both basic fraud checks and phone verifications.

Configuration

To configure the MaxMind service navigate to Setup > Fraud Protection > MaxMind. Tick the Enable checkbox and enter the Licence Key provided by MaxMind when you signed up.

There are a number of options available so you can select the exact criteria an order must satisfy before being automatically approved. If these criteria are not met then the order will remain in "Fraud" status and the invoice will be "Cancelled".

Reject Free Email Service

Ticking this option checks if the e-mail domain used by the customer is from a free e-mail provider and if so will flag the order as fraud. Examples of free e-mail providers include the following: Yahoo.com, Gmail.com, and MSN.com. The MaxMind system currently has categorized 31,000 free e-mail domain providers around the world.

Reject Country Mismatch

The if billing address provided by the client is significantly different from the location of the IP Address used to place the order, it will be flagged as fraud.

Reject Anonymous Proxy

Orders placed via an anonymous proxy are highly likely to be fraudulent. Ticking this option means order will be rejected.

Reject High Risk Country

This field determines if the transaction's billing address or IP address is located in a country that MaxMind has flagged as high risk. A positive matches means that either the IP address or billing address is located in one of the following countries.

MaxMind Fraud Risk Score

Each order is given a risk score by MaxMind based on the criteria explained in their documentation above. Order with a risk score higher than the value entered here will be flagged as fraudulent.

Use New Risk Score

Maxmind have implemented a new riskScore system on a scale of 1-100. If you wish to use this scale in the MaxMind Fraud Risk Score field above, tick this box. More Information

Do Not Send City

By default the module will compare the city name the client entered into the order form against Maxmind's list of world cities. If the provided city is not found in the list, the order will be rejected. However sometimes Maxmind's list may be incomplete or there may be multiple spellings of the same city which can result in this check rejecting legitimate orders. Tick this option to skip the city check.

Notes

The score rating that you want to start blocking orders at is up to you but MaxMind recommend 2.5. For more information, see Web Services Score

Common Errors

MAX_REQUESTS_REACHED

This means you have run out of MinFraud queries on your Maxmind account, you will need to purchase more queries via the Maxmind website.