Business Fraud & Viruses.

We are getting about 10 viruses a day & several fraudulent orders. Help!

[alex_cross]

We are getting about 10 viruses a day & several fraudulent orders each day. In addition we are getting pounded with email-spam.

[Mike_Mackin]

Any chance it is from a guy named Chavez from [e-mail]

We have been hit hard for a week now.
Can't seem to stop him with mail server filter

The guy doesn't know we run MACs
Just keeps sending .bat files

[alex_cross]

There are no emails attched. I cannot forward them, reply to them, etc... I know who is causing this but don't know what to do about it. This is the first time I have seen a masked email address.

[gsx]

Same problem here. My problem was last August.

Solutions were:

FRAUD:
1) Change your merchant account to pre-auth if possible.
2) If you use WorldPay, you may be able to block selected email addresses.
3) Check all IP addresses are from the country that they state they are from.
4) Ensure that you do not respond to any emails from people who are using fraudulent cards - with the exception of requesting a fax copy of the card for proof of ownership. Make a standard email for this.
5) On your payment page, display the IP address of the user plus a notice that all fraud attempts are reported to the card issuing company and the police. (Most are not bothered about the police, but they don't want you to stop a stolen card number).

SPAM and VIRUSES:
1) Set up filters based on email address or subject line to delete spam automatically from the server, it will never be downloaded (thus any virus protection software will not cause an alert - but I don't suppose you are getting them, running a Mac :) ). They will be permanantly lost, so be careful when you set them up.

[alex_cross]

5) On your payment page, display the IP address of the user plus a notice that all fraud attempts are reported to the card issuing company and the police. (Most are not bothered about the police, but they don't want you to stop a stolen card number).

How do I do this?

What is WordPlay?

[ukgimp]

in ASP
<%Response.Write(Request.ServerVariables("remote_addr"))%>

in PHP
<?php print $HTTP_SERVER_VARS["REMOTE_ADDR"] ?>

If you look for tutorials on requesting server variables you will find loads

Cheers