Fraud Prevention for Magento 1
Blacklisting rules that detect and block fraudulent orders in Magento.
- v1.4.0
- Magento CE 1.4 – 1.9, EE 1.8 – 1.14
- OpenMage
- MIT License
- Released Feb 2020
Features
- Custom blacklisting rules based on any combination of customer attributes
- Automatic detection and blacklisting of suspicious orders
- Manage suspicious and blacklisted orders in the admin
- Block blacklisted orders from being paid and shipped
- Blacklist billing and/or shipping addresses
- Blacklist customer accounts and block guests during checkout
- Hide payment methods for blacklisted customers
- Add fraud strikes for failed payment transactions
- Configurable number of strikes before blacklisting
- Rules per customer group and store view
- Works without third-party fraud services
Overview
With internet fraud being more widespread than ever, all webshops run the risk of being targeted by malicious customers. This often results in profit loss caused by credit card chargebacks and customers claiming back their money, pretending to have never received their order.
Because payment service providers generally rule in favor of the customer when receiving a claim, nine out of ten times the eCommerce merchant will get stuck with the bill. The Fraud Prevention extension lets you handle fraud prevention yourself, without a third-party service.
Simple fraud suspicion management#
Fraud Prevention provides a simple but efficient solution to minimize fraud independently and directly in the Magento Admin Panel.
When coming across a sales order that hasn't been paid or that needs to be refunded due to questionable reasons, you can simply mark it as suspicious in the back-end to create a fraud suspicion record.
This record includes various customer attributes and serves as a reference to automatically detect future fraudulent orders and prevent them from being processed.
Custom blacklisting rules#
The extension enables you to create custom blacklisting rules based on any customer attribute combination, such as name, address, ZIP code, email address / domain and IP address.
Each time a new order is placed, these rule attributes are compared with your fraud suspicion database. If a match is found, the fraudulent order is automatically blacklisted and blocked for shipping, so you don't have to worry about losing your merchandise to malevolent customers anymore.
Because the blacklisting rules can be enabled per customer group, you can make sure that trusted customer are automatically excluded from your Fraud Prevention rules.
Read the full description
Automatic fraud detection#
A blacklisting rule will only be triggered if the required amount of 'strikes' or matching fraud suspicion records has been found.
In this way you can prevent that orders are blacklisted after only one fraud suspicion, giving your customers the benefit of the doubt. After all, most of them have only good intentions.
In case a fraud suspicion proves to be unfounded orders can be whitelisted with just one button click, after which they can be processed normally again.
Customer account & guest blacklisting#
The Magento Fraud Prevention plugin also makes it possible to automatically or manually blacklist customer accounts, after which the blacklisted customer is directly logged out and blocked from logging back in.
Customers can be automatically blacklisted when trying to place or update a fraudulent order, or when adding a blacklisted address in their customer account or during checkout, which can even be used to block guests visitors.
If a blacklisting rule is triggered during checkout, the shopping cart will be emptied and all billing details deleted, discouraging both customers and guests to place a fraudulent order again.
Blocked payment processing#
Another option to protect your business from unwanted credit card chargebacks is to block payment processing during checkout by hiding the payment information section if a blacklisted address is used.
Besides that you prevent fraudulent orders by automatically adding a fraud suspicion strike to the customers billing and/or shipping address when a payment transaction fails.
Documentation
8 pages from the user manual.
Changelog
Release history23 releases, Oct 2014 – Feb 2020
Since 2026Open source
- 1.4.0
Added Magento admin area order grid mass actions for adding / removing fraud suspicion records, whitelisting orders and whitelisting customers
- 1.3.6
- Fixed order grid date filtering issue caused by conflict with external extension(s) / code
- Removed leftover debug logging statement
- 1.3.5
- Removed Mage_Sales_Model_Order rewrite for compatibility with 3rd party extensions
- Added parsing for X-Forwarded-For header so only client IP is used for customer IP field
- Fixed 'Not Logged In' customer filter issue
- 1.3.4
Fixed customer grid bug when custom grid customization extension is used
- 1.3.3
Additional fix for Magento 1.7 and below regarding order e‑mail confirmation
Show 18 older releases
- 1.3.2
Fixed issue for Magento 1.7 and below regarding order e‑mail confirmation
- 1.3.1
- Made closed orders also blacklistable
- Fixed issue regarding customer ID for customers creating an account during checkout
- 1.3.0
- Re-enabled e‑mail domain as attribute for blacklisting rules
- Added e‑mail domain exclude list, which can be used for excluding common domain names from being blacklisted
- 1.2.8
- Fix for order grid not working in admin customer account when no orders had been placed yet. (Magento EE)
- Fixed compatibility issue with Mirasvit RMA
- 1.2.7
- Fixed customer IP saving issue
- Disabled 'Blacklisted' status for refunded orders
- 1.2.6
- Some minor code changes for Magento Marketplace
- Bug fix for 'correlation name' error
- 1.2.5
Customer IP blacklist issue fix
- 1.2.4
Fixed notice level error when adding product to cart
- 1.2.3
Added positive number validation to permitted strikes field in admin area
- 1.2.2
- Fixed mage 1.6 compatibility
- Fixed ambiguous column issue in order grid
- 1.2.1
Fixed disabled rule issue
- 1.2.0
- Added X_Forwarded_For IP support
- Added fraud status in customer grid
- Account blocked error message is now only shown for a short period of time
- 1.1.1
Applied order email sending fix for Magento < 1.9.1
- 1.1.0
- Added whitelisting options for blacklisted orders
- Added option to blacklist customer accounts and block guests during checkout
- Added option to block orders before payment
- Added option to blacklist orders based on failed payment transaction
- Added IP address and e‑mail domain to blacklisting rules
- Added option to enable blacklisting rules per customer group
- Fixed blacklisting trigger issue when all values are null
- Fixed order confirmation issue for blacklisted orders
- Fixed compatibility with Amasty Order Grid extension
- Made compatible with latest security patch
- Removed notice and warning errors
- 1.0.3
Fixed observer bug
- 1.0.2
Added option to not send order confirmation e‑mail when order is blacklisted
- 1.0.1
Fixed some minor bugs
- 1.0.0
First release of Magento Fraud Prevention extension by Plugin Company.
More for Magento 1
-
Custom Contact Forms
Drag‑and-drop contact form builder for Magento 1.
-
Automatic Customer Group Switching
Moves Magento customers between customer groups based on rules you define.
