Latest revision as of 17:22, 26 April 2022

MaxMind offers 22 different risk ratings and scores to enable WHMCS and you to decide whether an order is fraudulent. For details about each of the individual checks, see the minFraud White Paper. MaxMind allows you to do both basic fraud checks and phone verifications.

Configuration

To configure the MaxMind service:

1. Go to Configuration () > System Settings > Fraud Protection or, prior to WHMCS 8.0, Setup > Fraud Protection.
2. Click MaxMind.
3. Check Enable.
4. Enter the license key that MaxMind provided when you signed up.
5. Select the criteria that an order must satisfy before being automatically approved. If these criteria are not met then the order will remain in the Fraud status and the invoice will have the Cancelled status.

Reject Free Email Service

Enable this to flag the order as fraud if the customer's email's domain is from one of MaxMind's 31,000 catalogued free email provider (for example, yahoo.com, gmail.com, or msn.com).

Reject Country Mismatch

Enable this to flag the order as fraud if the client's billing address is significantly different from the location of the IP address with which they placed the order.

Reject Anonymous Proxy

Enable this to flag the order as fraud if the client used an anonymous proxy.

Reject High Risk Country

Enable this to flag the order as fraud if the transaction's billing address or IP address are from a country that MaxMind has flagged as high risk.

MaxMind Fraud Risk Score

Enter a value for the maximum allowable risk score. MaxMind assigns a risk score to each order according to their criteria. MaxMind will flag any order that exceeds the risk score you enter as fraud.

MaxMind recommends that you set this to 2.5 for the original scoring system or 25 if you enable the new risk score system via the Use New Risk Score setting below. For more information, see Web Services Score.

Use New Risk Score

Enable this to use MaxMind's newer risk score system on a scale of 1-100.

Do Not Send City

Enable this to skip checking the city on orders against MaxMind's list of world cities.

By default, if the client's city is not in MaxMind's list, MaxMind will flag the order as fraud. However, sometimes Maxmind's list may be incomplete or there may be multiple spellings of the same city. In these cases, the check could reject legitimate orders.

Common Errors

MAX_REQUESTS_REACHED

This means you have run out of MinFraud queries on your MaxMind account, you will need to purchase more queries via the MaxMind website.

INVALID_LICENSE_KEY

This error indicates that the license key you provided in your settings is incorrect. It can also indicate that your license key is not valid for the service you are attempting to access. You should first verify your license key has been properly entered at Setup > Fraud Protection. If the license key is correct, you should contact MaxMind to inquire why your license key is returning as invalid.

LICENSE_REQUIRED

This error will be returned if no license key has been provided. Please check your license key setting at Configuration () > System Settings > Fraud Protection or, prior to WHMCS 8.0, Setup > Fraud Protection.

PERMISSION_REQUIRED

This is returned if you do not have permission to use the service. Please contact MaxMind for more information.

IP_NOT_FOUND

This error will be returned if the IP address is not valid, if it is not public, or if it is not in our GeoIP database.

CITY_NOT_FOUND

MaxMind maintain a list of valid cities, this city in the client's Profile at the time of ordering must match one of the cities on MaxMind's list, otherwise the order will be rejected with this error.