Card Fraud Detection Website

[bcarroll]

https://www.maxmind.com/app/ccv_overview
I have just joined this website and am awaiting my access code but if what it claims to do it can do then we should all join.

The site takes the IP address, Post Code, and BIN number (basically first 6 digits of credit card) and compares them based on geographical details. Ie if the IP address belongs to USA, the shipping address is Thailand and the Card was issued by an English bank it will scream...

It also checks that the IP address does not belong to a known Anonomous Proxy and that the email address is not a known free email.

For this it charges $20US for 5000 queries!

There is a free search (limited to 20 queries per day) that does all of the above less the BIN seach. The BIN search is what sets this apart from any other method I have seen.

[dferguson]

Let us know how you go!

[davidel]

bcarroll - any updates on this?

ta
David Ellis
www.ozeyarn.com

[dawsonmm]

Hi,

over the weekend I logged into the web site and had a fiddle. It looked interesting so I emailed them and they gave me a temporary registration for 100 Premium transaction. I tried it out on a few transactions I already knew the status of plus a few that I knew where obvious frauds and it seemed to come of with the right answers. Mind you through it doesn't give you a definate answer on what will be a fraud and what is not but it helps remove some of the grey areas. I especially liked the BIN number checks. Try dropping them a note they may do the same for you.

Regards

Michelle

[dawsonmm]

Hi,

here is an obvious fraud transaction that shows the output provided. I hope this helps

You enter these 5 things...

Inputs
IP Address 213.185.113.42
Domain of E-mail address fastermail.com
Credit Card Billing City/Region/Postal mushin lagos 23401
Credit Card Billing Country NG
BIN Number 549123

And get all these back with a score.

Results (Output)
Estimated distance from IP Address to CC Billing Address, in Kilometers: 9033
Country Match No
IP Country Code EC
Free E-mail Provider Yes
Anonymous Proxy No
BIN Country Code US
BIN Match No
BIN Name USAA SAVINGS BANK
Open Proxy Score (0 low risk, 10 high risk) 0.00
Spam Source Score (0 low risk, 10 high risk) 0.00
Fraud Score (0 low risk, 10 high risk) 9.5
IP Address Estimated Location Information
IP Region
IP City
IP Latitude -2.0000
IP Longitude -77.5000
IP ISP INTELSAT
IP Organization Reassignment to Global Meridian customer, Nigiria

[bcarroll]

I really think merchants should get behind this service. In my eyes it is the best I have seen and is so inexpensive

[dawsonmm]

Hi,

just wondering if it is possible to get EM to capture the card issuer from the client. The web site we have been looking at here MaxMind, now allows you to capture further BIN details. See snip below from registered user input web page.

==snip==
IP Address (e.g 24.24.24.24)
Domain of E-mail address (e.g aol.com)
Credit Card Billing City (e.g New York City)
Credit Card Billing Region State or Providence Abbreviation (e.g NJ)
Credit Card Billing Postal Code Zip Code (e.g. 07302)
Credit Card Billing Country ISO 3166 country code (e.g. GB)
BIN Number (optional) First 6 digits of the credit card number (e.g. 549099)
BIN Name (optional) Name of the bank which issued the credit card (e.g. MBNA America Bank)
BIN Phone (optional) Customer service phone number listed on back of credit card (e.g. 800-421-2110)
Customer Phone (optional) Area code and local exchange of customer's phone number (e.g. 212-242)
==end snip==

Best regards

Michelle

[dawsonmm]

Hi,

any ideas on capturing this info?

regards

Michelle

[bmusic]

I have used Maxmind for a year or so, only recently did the new BIN phone and longitude and latitude features come in under the $20 fee level. It was in a form somewhere between the current free one and the paid first level one for the time I've used it for no charge. At $20 US it's nothing for peace of mind.
Of course the site is more suited to US merchants but there is enough information to bust open most attempted frauds. The good fraudsters know some of what information we are able to garnish from MaxMind but they don't know everything. If it all checks out to a fraud score of 0 you're pretty safe, but each of us have our intuition, and our processes to go through to TRIPLE check everything.
Always be diligent. But MaxMind is an excellent resource for the money.

Another good site is www.merchant911.org Not the flashest site for appearance, but an excellent resource for members with an e-mail list for reporting fraud attempts to other Merchant911 members, again US based but we can get good info nonetheless.

Happy trading all :)

P.S. Recently attempts have begun to increase from Yugoslavia, the Nigerians, Indonesians and Moroccans gave up long ago.

[niko]

I get a lot of fraudulent requests via e-mail rather than online to send multiple quantities of the same item most recently from Singapore, or purportedly to be from Singapore. A recent online order had a delivery address in USA and yet the IP Address came from another continent. I sent an e-mail regarding this issue to the fraudster but of course never heard from him. I came across Maxmind a year ago and never really took it up because I can dismiss 99% of the most obvious Fraudulent e-mails and about 50% of online orders. I have used Maxmind 4 times and it certainly cleared up any concerns I had. Out of that I sent an item to Malaysia and appears to be a geniune sale. However, I have to admit, the customer even bothered to ring me, making the decision even easier.

This issue and advise you few people have given should be clearly made more obvious for all of us.

[paysite-cash]

Hello

Just find this forum..looks interessing

I plan to use maxmind fraud cc detection...I have 3 questions for those who uses

- I don't have town, region , postal code...we don't sell good but only subscriptions..so..we ask for email only...looks to works without those info...what do you think ?

- the most interesting question, what is the max score that you accept to proceed a transaction ?

- we are not going to use the system on the us market...is it fiable outside the us ?

thanks for your help

[dawsonmm]

Hi,

the data you mention is optional but it does help to narrow down doggy sales. If you are just using the credit card prefix and comparing it to the credit card country and checking the email address I would use a low number like 2 or 3. To be honest though why not collect the address from the customer and do you own phone book checks.

Best regards

Michelle

[dnhp]

What have I been doing until now without this brilliant site - thanks for discovering it! I've inputed a dozen fraudulent transactions including the obvious ones from Nigeria/Indonesia and several that weren't obvious that I've had chargebacks on and they all came up with high fraud values. if I'd had this tool before it would have saved a bundle. The acid test with these things is whether it gives false positives though - I've entered transactions that could have been dodgy that I have had the customer validate by faxing throught the credit card front and back from places like Thailand or people with suspicious names and they all returned between 0 and 2, which I assume to be OK.

I would only have time to do this for suspicious orders though and the above were all tested on the manual webpage - Has anyone used the automatic product they offer?

[dferguson]

Hi Everyone

We have now fully integrated MAXMIND Fraud detection into ezimerchant Professional!

ezimerchant V3.8.2 and above have this feature.

We provide two levels of Fraud Data.

1. Basic Fraud Data (we provide this for free even though Maxmind charge us for this data)
2. Premium Fraud Data (we charge $10.00 per month for this data regardless of how many transactions your store gets)

For more information please see the documentation from within the DOWNLOAD ORDERS section of ezimerchant. (V3.8.2 or above)

We implemented this feature into ezimerchant Professional as a DIRECT result from posts on this forum. Please support ezimerchant by using the new features including the Premium Fraud Data service. It costs $10.00 more per month, but will save you a heap of time compared to logging into Maxmind for every transaction!

To turn this feature ON goto the ORDER DOWNLOAD section of ezimerchant Pro and then into the FRAUD DATA tab and click the "ENABLE PREMIUM FRAUD CHECK" button and follow the instructions on screen. You will be asked for a username and password - This is your GTS username and password. Once these have been entered the Premium Fraud Data will be enabled and any Credit Card orders from that point onwards will contain the premium fraud data.

I think the most valuble data it provides is the Card Issuers Bank followed by the ISP they were connected through at the time of the order. These two can really help you determine if the transaction was fraudulent or not.

[bmusic]

"To turn this feature ON goto the ORDER DOWNLOAD section of ezimerchant Pro and then into the FRAUD DATA tab and click the "ENABLE PREMIUM FRAUD CHECK" button and follow the instructions on screen. "

Is it just me, I don't see am "Enable Premium Fraud Check" button anywhere under the Fraud Data tab in version 3.8.6 I've just installed. Any clues as to why this could be?

[dferguson]

Hi

You need to have an order selected that has an actual fraud score.. (any credit card order recieved after updating to 3.8.6 will have basic fraud data)

[DonGabriel]

Dears,

I've subscribed the Premium account and I must say... I'm almost crying ...

If I was using this service in 2002 I should have saved Eur.100.000.00 in charge backs from some international thiefs based in Indonesia.

This system is very important, Visa and Mastercard do not pay any attention to their merchants. They are making money out of the crage backs, I'm sure you all know it.

Great website, Great service, very affordable system.

Thank you guyes, I'm very happy !

Best Regards,

DonGabriel

[sexytoyboxaustralia]

hi, does ezimerchant 4 still allow the basic fraud checks? As far as I can see only the premium one is currently available.

[niko]

It is working for me. As to 100,000 Euros.... so far since 2003 I have only had 1 charge back at $200 and a possible fraudulent transaction. I say possible because the transaction hasn't been reversed and that was 2 years ago. Had a "dead" laptop stolen but dealt with it quickly and learnt not to store old orders. Let me guess, wanted to buy multple items via c/c sent by Fedex and to a holding ramp at the airport? I never sell to anyone in Asia or Africa unless they call me (which was only once from Malaysia and was legit) or direct deposit.

[dferguson]

hi, does ezimerchant 4 still allow the basic fraud checks? As far as I can see only the premium one is currently available.

Yes. Nothing has changed in this regard.