high order request from other countries

[giftedwon]

i am getting frustrated with countries such as Indonesia and Malaysia. I am not saying all people in those countries are bad, im getting sick of the people with fake credit cards trying to by stuff at my site.

these past two months they continue to attempt to purchase 2000+ dollars worth of stuff to ship it there. there orders continue to get denied but they do not stop. today i had a order from upstate new york failed about 15 times. i did a geo locater on the IP address and saw that its from indonesia as well.

why would they try to order it to new york? is it going to be rerouted or are they just playing stupid games? i attemped to call the phone number that they left but no one answered.

[lorax]

Welcome to WebmasterWorld!

The short answer of why is fraud...

You may find these interesting to read:
Order from Nigeria [webmasterworld.com]
Credit Card fraud from Ghana/Nigeria [webmasterworld.com]
one of the bigger orders ... from Nigeria [webmasterworld.com]

[MWpro]

Well, if you do not wish to ever ship to indonesia, you can ban all indoneians from your site by IP.

I had similar problems with my forum. I noticed that all the spam attacks were coming from Europe's RIPE network. I have no use for European visitors (the niche is not a global one, only a North American one), and am considering ways to ban the RIPE network.

Even though I beefed up forum security on my site, the spam bots still linger on my site, drawing bandwidth. It's ban time.

[edited by: MWpro at 6:12 am (utc) on Nov. 17, 2008]

[giftedwon]

i blocked as much as the country as possible but they still slip in.i guess my list is old. do you have an active resource or a way to block countries ?

[Morgenhund]

Trying to ban a country by IP is pretty much useless, it works only with the most newbie scummers. Everyone can rent a server in the US and route traffic through pristine IP address.

What payment options do you offer? Can you, say, allow only bank wire transfer for orders over $#*$!X?

[Rugles]

why would they try to order it to new york? is it going to be rerouted

yep, they have somebody who will either resell the stuff in the US, turning your goods into cash

or they package it all up and send it overseas

sometimes they trick somebody into thinking they have a frieght forwarding job and use their home address, or they might set up an apartment for a short time while they steal all these goods from internet retailers

[edited by: Rugles at 8:23 pm (utc) on Nov. 18, 2008]

[giftedwon]

I have an update. It appears that myself and a friends site have been getting fake orders from Greece now. Has anyone had fraud from Greece show on the radar ?

[Morgenhund]

Greece is not the richest European country, but should not be that bad.

But there are much poorer ex-communist countries near its border... I gues that is where the orders finally go.

[Rugles]

I have an update. It appears that myself and a friends site have been getting fake orders from Greece now. Has anyone had fraud from Greece show on the radar ?

I have had fraud from the US, Canada, UK, Austrailia and most of Western Europe. So the wealth of a country does not make it immune.

[enigma1]

My opinion is to first secure your site's forms for ordering, accounts and the like. I doubt these are real people who place orders and are rather bots able to bypass your forms in some way.

You should be able to verify this by checking the ips that placed orders from the server logs and see what was accessed. Stuff like timings between page transitions, images downloaded etc., could give you some hint on what really is going on.

In case of automated scripts, there are ways to secure registration and ordering because the information needed must be posted and that makes filtering much easier for merchants.