Fraud Protection

WHMCS can automatically run checks on orders to help ensure only valid clients get through and to block any potential fraud. By integrating with a range of providers, there is a choice of services available, from checking the details of the person placing the order against their billing details down to automatically calling and verifying their identity. WHMCS supports the following fraud protection services:

• FraudLabs Pro — Order Verification Services.
• MaxMind — Risk Scoring Services.

Setting Up Fraud Modules

To enable and use a fraud protection module in WHMCS, navigate to Configuration () > System Settings > Fraud Protection.

• Choose the module you want to use.
• Select Enable and then complete the form. The form varies depending upon specific supported options for each solution.
• Click Save Changes.

Note: You can only use one fraud protection module at a time, so you must only enable one at a time.

MaxMind

MaxMind is the most popular fraud detection service that WHMCS customers use. MaxMind offers a risk scoring service that will run automatically each time that a user places an order. It will calculate a score instantly for the riskiness of a particular order, using both the data that a customer provides during signup and the IP address they are connecting from. WHMCS then allows you to use this score to automatically block orders that may be too risky to allow through for payment. However, you still have the option to manually override upon manual review if you need to.