Welcome to WebmasterWorld Guest from 220.127.116.11
Forum Moderators: buckworks
WorldAlert result: WARNING
This transaction has been identified as potentially high risk. We strongly recommend further checks before fulfilment of an order....
Now, looking at my Worldpay Admin server it says the following as the customer is in Canada (Worldpay obviously doesn't do an AVS check on people from Canada!)
security code comparison - 0 (not supported)
postcode comparison - 1 (not checked)
address comparison - 1 (not checked)
card issue country/contact country comparison - 4 (not matched)
Is there any way I can check if this card matches the customers address etc WITHOUT having to contact the customer?
If the Country code does not match there is a serious error. Neither can WorldPay check the other details - they always come back as not supported or not checked as they cannot be checked - they are trying to get the details from the wrong bank, their details will not be there.
Not 100%, but try infobel.com to help double check. Try an IP trace site, see if the source IP was from Canada or not (if you are not logging IP numbers with your order system, change it so it does).
One more trick, ring them. Hang up. You may find that the number does not even exist or is constantly an answer machine.
but the IP address used is not (or probably not) canadian, hence the 4 (not matched).
that is a definite "do not supply".
you'll probably find
check UK addresses etc at www.192.com - it's worth paying for. you also get the electoral roll etc there.
check addresses etc for other countries from infobel.com (reverse searches on phone numbers also available on infobel.com for USA)
if infobel doesn't do the country you need to check out, just search on a search engine for "white pages" plus the country name
check IP addresses at www.ripe.net or download an IP address checking script and use it in your callback
search on google and fast for the names / addresses / postcodes / email addresses etc that are given with the order - you might find them listed somewhere
join merchant911.org and early-warning.org.uk - other users will post their frauds to the lists so you can check against the lists. if you get a fraudulent order, post the details to the list yourself to help others out.
lots more you can do but no time to tell all .... just got time to tell you to switch over to pre-auth if you haven't already - you only complete genuine transactions, if you get a fraud you just ignore it, no money taken from the card, no transaction costs, no chargeback risk.
When a canada order came up I would call the credit card company merchant services number and tell them the account number of the card, they would then give me the phone number of the issuing bank.
Then all you have to do is call the bank and ask them to verify the account & address.
It usually works, but sometimes you run into trouble with individual bank policies.
They will check AVS manually for you. They will tell you whether the name and address on the credit card matches that of the invoice address. This request may take anywhere from 1 - 7 days.
In our experience, transactions that carry this sort of warning are highly likely to be fraudulent. In most cases, a hacker would have used the downloaded credit card details from a US person for shipment to a developing country in SE Asia, Eastern Europe and Latin America.
The only exceptions are the following which often turns out to be genuine
1. Persons residing in New Zealand often uses a credit card issued by an Australian bank
2. Persons residing in Canada or Puerto Rico often uses a credit card issued by a US bank
2. Persons residing in Ireland often uses a credit issued by a UK bank.
This bank holiday weekend my new tiny little store was hit by some nasty evil fraudsters... same IP addresses yet one minute they live in the USA, next in Manchester, England!
Makes me sick people can do this. But it's my own fault for not getting pre-auth set-up on Worldpay soon enough (this has now been requested....)
Derek, the Code10 check is a good idea (amazing that Worldpay have never told me this) - but with pre-auth you only have 5 days to process the transaction so if they can take up to 7 days it wouldn't be so great.
Has anyone noticed that Worldpay doesn't seem to do AVS checks on USA credit cards like the address comparison or Postcode. It does do the security (on some) and card issue country/contact country comparison. Or am I hopelessly wrong on that?