1

Recently I've been getting fake orders. At first customer accounts get registered on website and then fake orders placed using credit cards. All done within 10 minutes. Orders are made for the same type of products. Whats most interestingly is that orders are placed using legit credit cards.

Are such orders placed by bots ? How to stop them ?

2
  • Why do you think these are fake orders? Commented Jun 17, 2015 at 15:07
  • similar type of email addresses. different ip's, different shipping/billing details.
    – philtak
    Commented Jun 17, 2015 at 15:26

1 Answer 1

3

You can perform the following checks.

  • Check the IP addresses of the orders as you have done, but take it a step further and identify the country from which they are from. Are they from you target market or something obscure. Also do the match the deliver address in your orders.
  • Check your access logs and try follow some of the transactions. You should be able to identify firstly the user agent though this can be easily spoofed. You can also check the referring. Something that most bots do not attach is a referrer.
  • Follow up with your payment gateway to confirm if the transactions are with stolen cards or not

With regards to preventing bots from creating orders are

  • Enable CAPTCHA on both checkout and registration through the magento backend
  • To protect yourself and you customers talk to your payment gateway about 3D secure, this is a technology that both Visa and MasterCard use to combat eCommerce fraud.
  • A drastic but possible approach depending on your target audience is block purchasing buy country. Or if it the IP are the same block just those specific IP's, though any fraudster will just use a different IP quite easily.
1
  • How do you block countries? Commented Nov 25, 2015 at 15:47

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.