yournamehere Posted March 13, 2009 Share Posted March 13, 2009 Hi,My site (www.concordfoto.co.uk) keep recieving a set of spam orders. They appear to be coming from similar IP addresses, and there is a definate patern to them.They are:-really generic name never begining with a capitol letter (e.g. charles FOGWORTH)-Always london address-Always ordering a selection of Nikon camera gear.-Email address registered always a name which deosn't relate to given name, then number @ gmail.com ([email protected])-Credit card information always registered as stolen or as not existing anymore.The information is being processed through the "Offline Credit Card Module" which I am aware has no spam blocking on it. How do I stop this happening, becasue my staff are starting to get pissed off with the half hour or so each day of processing order information that turns out to be fake...CheersSam Link to comment Share on other sites More sharing options...
tatamata Posted March 13, 2009 Share Posted March 13, 2009 yeah, captcha would help but noone wantst to implement it... for some strange reason... Link to comment Share on other sites More sharing options...
ruilong Posted March 14, 2009 Share Posted March 14, 2009 how about not using the offline credit card module and implement a payment gateway instead? like paypal, worldpay or some local service? this way people won't missuse your site trying to use stolen credit cards. Link to comment Share on other sites More sharing options...
jhnstcks Posted March 14, 2009 Share Posted March 14, 2009 You could always block that ip address using your htaccess file Link to comment Share on other sites More sharing options...
VIXUS Posted March 15, 2009 Share Posted March 15, 2009 how about not using the offline credit card module and implement a payment gateway instead? like paypal, worldpay or some local service? this way people won't missuse your site trying to use stolen credit cards. we are talking about fake, spam orders not stolen identitys mate... Link to comment Share on other sites More sharing options...
Fabien Posted March 16, 2009 Share Posted March 16, 2009 I answer two month later, I hope it's not too late ^^So, I had a similar problem on a forum with spamming messages.I resolved it by changing the name of an obligatory input. If the creator of the bot doesn't see that you change the name of your input, you won't have spamming orders anymore.Tell me if it's working. Link to comment Share on other sites More sharing options...
irideflatland Posted April 15, 2009 Share Posted April 15, 2009 I answer two month later, I hope it's not too late ^^So, I had a similar problem on a forum with spamming messages.I resolved it by changing the name of an obligatory input. If the creator of the bot doesn't see that you change the name of your input, you won't have spamming orders anymore.Tell me if it's working. What do you mean you changed the name? Link to comment Share on other sites More sharing options...
yournamehere Posted April 18, 2009 Author Share Posted April 18, 2009 A new episode to my rather annoying saga.One of the initial orders that didn't appear to be spam, had been processed, and the items dispatched (2 new cameras coming to about £800).This was 2 months ago. Today we got a letter from the bank saying that they are removing the £800 from our account due to processing the persons detials without their authority. The only issue is that the name on the bank letter isn't that on our order.We just lost £800 to credit card fraud...How can I stop it...? Now.I've gone through our orders and this person is sednding multiple orders per week from mulitple IP addresses and he's costing us money... Link to comment Share on other sites More sharing options...
first1 Posted April 18, 2009 Share Posted April 18, 2009 Did you report the IP addresses to anyone (maybe open a fraud case with the police), did you try to locate where they are (what country).would not wroking with protx (processing credit cards online) and pay the 1 % extra to the bank and £20 per month work cheaper than getting all the hassle and the fraud losing £800 , they use matching credit card holder and address verification...?why are you chosing the easy route to process the cards manually? i know it is cheaper but the different is soo low considering the risk. Link to comment Share on other sites More sharing options...
Recommended Posts