MaxMind offers 22 different risk ratings and scores to enable WHMCS and you to decide whether an order is fraudulent. For details about each of the individual checks, see Fraud Detection Manual MaxMind allows you to do both basic fraud checks and phone verifications. WHMCS offers free MaxMind minFraud service if you have a license purchased directly through them.
1000 Free minFraud Checks
We have formed a partnership with MaxMind which allows us to provide all our clients with discounted MaxMind Services & the MinFraud Service for Free! MaxMind's minFraud service combines a wide range of threat measuring tools into a simple service that is easy to use - especially with WHMCS! The minFraud service returns a risk score for each order and information for up to 22 other checks to help you determine the riskiness of a transaction.
To configure the MaxMind service navigate to Setup > Fraud Protection > MaxMind. Tick the Enable checkbox and enter the Licence Key provided by MaxMind when you signed up.
There are a number of options available so you can select the exact criteria an order must satisfy before being automatically approved. If these criteria are not met then the order will remain in "Fraud" status and the invoice will be "Cancelled".
Reject Free Email Service
Ticking this option checks if the e-mail domain used by the customer is from a free e-mail provider and if so will flag the order as fraud. Examples of free e-mail providers include the following: Yahoo.com, Gmail.com, and MSN.com. The MaxMind system currently has categorized 31,000 free e-mail domain providers around the world.
Reject Country Mismatch
The if billing address provided by the client is significantly different from the location of the IP Address used to place the order, it will be flagged as fraud.
Reject Anonymous Proxy
Orders placed via an anonymous proxy are highly likely to be fraudulent. Ticking this option means order will be rejected.
Reject High Risk Country
This field determines if the transaction's billing address or IP address is located in a country that MaxMind has flagged as high risk. A positive matches means that either the IP address or billing address is located in Egypt(EG), Ghana(GH), Indonesia(ID), Lebanon(LB), Macedonia(MK), Morocco(MA), Nigeria(NG), Pakistan(PK), Romania(RO), Serbia and Montenegro(CS), Ukraine(UA), or Vietnam(VN).
MaxMind Fraud Risk Score
Each order is given a risk score by MaxMind based on the criteria explained in their documentation above. Order with a risk score higher than the value entered here will be flagged as fraudulent.
Use New Risk Score
Maxmind have implemented a new riskScore system on a scale of 1-100. If you wish to use this scale in the MaxMind Fraud Risk Score field above, tick this box. More Information
Perform Telephone Verification
Ticking this box will enable to telephone verification system which automatically calls the client and and runs a verification check. More Information
Telephone Fraud Score
Orders with a risk score higher than this value will be required to complete the telephone verification before the order is approved (if enabled above). Should the client fail the telephone verification their order will be flagged as fraud.
The score rating that you want to start blocking orders at is up to you but MaxMind recommend 2.5. For more information, see Web Services Score