Revision as of 21:33, 1 December 2010

MaxMind offers 22 different risk ratings and scores to enable WHMCS and you to decide whether an order is fraudulent. For details about each of the individual checks, see Fraud Detection Manual MaxMind allows you to do both basic fraud checks and phone verifications. WHMCS offers free MaxMind minFraud service if you have a license purchased directly through them.

Configuration

To configure the MaxMind service navigate to Setup > Fraud Protection > MaxMind. Tick the Enable checkbox and enter the Licence Key provided by MaxMind when you signed up.

There are a number of options available so you can select the exact criteria an order must satisfy before being automatically approved. If these criteria are not met then the order will remain in "Fraud" status and the invoice will be "Cancelled".

Reject Free Email Service

Ticking this option checks if the e-mail domain used by the customer is from a free e-mail provider and if so will flag the order as fraud. Examples of free e-mail providers include the following: Yahoo.com, Gmail.com, and MSN.com. The MaxMind system currently has categorized 31,000 free e-mail domain providers around the world.

Reject Country Mismatch

The if billing address provided by the client is significantly different from the location of the IP Address used to place the order, it will be flagged as fraud.

Reject Anonymous Proxy

Orders placed via an anonymous proxy are highly likely to be fraudulent. Ticking this option means order will be rejected.

Reject High Risk Country

This field determines if the transaction's billing address or IP address is located in a country that MaxMind has flagged as high risk. A positive matches means that either the IP address or billing address is located in Egypt(EG), Ghana(GH), Indonesia(ID), Lebanon(LB), Macedonia(MK), Morocco(MA), Nigeria(NG), Pakistan(PK), Romania(RO), Serbia and Montenegro(CS), Ukraine(UA), or Vietnam(VN).

MaxMind Fraud Risk Score

Each order is given a risk score by MaxMind based on the criteria explained in their documentation above. Order with a risk score higher than the value entered here will be flagged as fraudulent.

Perform Telephone Verification

Ticking this box will enable to telephone verification system which automatically calls the client and and runs a verification check. More Information

Telephone Fraud Score

Orders with a risk score higher than this value will be required to complete the telephone verification before the order is approved (if enabled above). Should the client fail the telephone verification their order will be flagged as fraud.

Notes

The score rating that you want to start blocking orders at is up to you but MaxMind recommend 2.5. For more information, see Web Services Score

Note: As standard WHMCS uses the older MaxMind 0-10 score scale, to use the newer 0-100 scale tick the "Use New Risk Score" checkbox.