Revision as of 14:33, 28 June 2018 (view source) Matt (talk | contribs) (Created page with "MaxMind is a leading provider of IP intelligence and online fraud prevention tools. ==Setup and Configuration== To enable MaxMind integration, follow the steps below: * Nav...") Newer edit →

(No difference)

---

Revision as of 14:33, 28 June 2018

MaxMind is a leading provider of IP intelligence and online fraud prevention tools.

Setup and Configuration

To enable MaxMind integration, follow the steps below:

• Navigate to Setup > Fraud Protection > MaxMind
• Check the Enable checkbox
• Enter your MaxMind User ID and the Licence Key. You can find these within the My License Key page inside the MaxMind online portal.
• Click Save

Configuration Options

Choosing a Service Type

MaxMind offers three different levels of check at the time of writing:

• Score - minFraud score provides only a risk score in WHMCS. No other data is available when using this check type. MaxMind recommend this check type to build your own risk modelling.
• Insights - minFraud Insights provide a wide range of data to check the potential risk of an order. Information regarding the IP location, the country data and email address is provided with this check type. minFraud Insights is the most comparable offering to the older V1 API.
• Factors - minFraud Factors builds on the same data as Insights, and then provides additional scoring based on the order input. Check the comparison page for the subscores that can be provided.

Essentially, the higher the level, the more analytics and metrics feedback you will receive. The different service types each have differing costs associated with them. Please refer to the MaxMind website for more details.

MaxMind Fraud Risk Score

Orders that receive a risk score higher than the value entered here will be marked as fraudulent and prevented from completing checkout.

Reject Free Email Service

Ticking this option checks if the e-mail domain used by the customer is from a free e-mail provider and if so will flag the order as fraud. Examples of free e-mail providers include the following: Yahoo.com, Gmail.com, and MSN.com. The MaxMind system currently has categorised 31,000 free e-mail domain providers around the world.

Reject Country Mismatch

Select this option to mark an order as fraudulent if the billing address provided by a client is significantly different from the location of the IP Address used to place the order.

Reject Anonymous Networks

Select this option to mark an order as fraudulent if the order is placed via an anonymous network such as a proxy or VPN.

Reject High Risk Country

Select this option to mark an order as fraudulent if the transaction's billing address or IP address is located in a country that MaxMind has flagged as high risk.

Custom Rules

Custom Rules can be used to reject an orders based on a combination of rules you setup. Custom Rules can be created and managed from within your MaxMind account.

Upgrading from MaxMind V1

Your configuration will be automatically updated when upgrading a WHMCS installation from WHMCS 7.5 or earlier to WHMCS 7.6. However, one additional configuration is required to allow fraud checking to continue. The new User ID configuration parameter must be set for API Authentication to succeed. Your MaxMind User ID can be found on the My License Key page in a MaxMind account.

Legacy MaxMind Module

If you are looking for documentation for the MaxMind module in WHMCS 7.5 or earlier, please see MaxMind_Legacy_Module

Reject Free Email Service

Ticking this option checks if the e-mail domain used by the customer is from a free e-mail provider and if so will flag the order as fraud. Examples of free e-mail providers include the following: Yahoo.com, Gmail.com, and MSN.com. The MaxMind system currently has categorized 31,000 free e-mail domain providers around the world.

Reject Country Mismatch

The if billing address provided by the client is significantly different from the location of the IP Address used to place the order, it will be flagged as fraud.

Reject Anonymous Proxy

Orders placed via an anonymous proxy are highly likely to be fraudulent. Ticking this option means order will be rejected.

Reject High Risk Country

This field determines if the transaction's billing address or IP address is located in a country that MaxMind has flagged as high risk. A positive matches means that either the IP address or billing address is located in one of the following countries.

MaxMind Fraud Risk Score

Each order is given a risk score by MaxMind based on the criteria explained in their documentation above. Order with a risk score higher than the value entered here will be flagged as fraudulent.

Use New Risk Score

Maxmind have implemented a new riskScore system on a scale of 1-100. If you wish to use this scale in the MaxMind Fraud Risk Score field above, tick this box. More Information

Do Not Send City

By default the module will compare the city name the client entered into the order form against Maxmind's list of world cities. If the provided city is not found in the list, the order will be rejected. However sometimes Maxmind's list may be incomplete or there may be multiple spellings of the same city which can result in this check rejecting legitimate orders. Tick this option to skip the city check.

Notes

The score rating that you want to start blocking orders at is up to you but MaxMind recommend 2.5 (25 using the new score). For more information, see Web Services Score

Common Errors

MAX_REQUESTS_REACHED

This means you have run out of MinFraud queries on your MaxMind account, you will need to purchase more queries via the MaxMind website.

INVALID_LICENSE_KEY

This error indicates that the license key you provided in your settings is incorrect. It can also indicate that your license key is not valid for the service you are attempting to access. You should first verify your license key has been properly entered at Setup > Fraud Protection. If the license key is correct, you should contact MaxMind to inquire why your license key is returning as invalid.

LICENSE_REQUIRED

This error will be returned if no license key has been provided. Please check your license key setting at Setup > Fraud Protection.

PERMISSION_REQUIRED

This is returned if you do not have permission to use the service. Please contact MaxMind for more information.

IP_NOT_FOUND

This error will be returned if the IP address is not valid, if it is not public, or if it is not in our GeoIP database.

CITY_NOT_FOUND

MaxMind maintain a list of valid cities, this city in the client's Profile at the time of ordering must match one of the cities on MaxMind's list, otherwise the order will be rejected with this error.