Protecting e-commerce stores since 2009

Block Fraud Before It Costs You

Pre-payment fraud screening powered by MaxMind's minFraud network. Every order is screened in real time — before your payment gateway is contacted. No order created, no payment captured, no chargeback.

Why Pre-Payment Screening?

Most fraud tools flag orders after payment. We block them before.

Available for Your Platform

Same enterprise-grade protection across all major e-commerce platforms.

When Fraud Costs More Than Chargebacks

Chargebacks and card testing don't just cost you money — they can cost you your payment processor.

The Risk

Payment processors like Stripe, Square, and PayPal monitor your chargeback rate and decline ratio. Exceed Visa's 1% chargeback threshold or let card testing bots inflate your declined transaction count, and your account is flagged — or terminated.

For merchants running subscription or membership businesses, account closure is devastating. The processor holds your customers' stored card numbers. If your account is closed, those cards are gone — and many members simply won't respond when asked to re-enter their payment information on a new processor. Half your recurring revenue can disappear overnight.

The Solution

WolfPaw Antifraud screens every order before it reaches your payment gateway. Fraudulent orders are blocked at checkout — no authorization attempt, no declined transaction, no chargeback. Your processor never sees the fraud.

IP velocity protection stops card testing bots before they can inflate your decline ratio. Instead of hundreds of declined authorizations hitting your account, the bot is blocked after a handful of attempts and every subsequent attempt is stopped at zero cost.

If your processor has flagged your account, installing pre-payment fraud screening demonstrates you've taken concrete action — a key factor in successful appeals.

What payment processors monitor: Visa and Mastercard require chargeback rates below 1%. Excessive declined transactions from card testing attacks raise additional flags. A single bad month can trigger monitoring programs that take months to exit — or account termination that takes your stored customer payment data with it.

Real-World Results: Card Testing Bot Stopped Cold

IP velocity protection and session destruction work the same way across all platforms — Miva, WooCommerce, Magento, and PrestaShop. Here's what happened when a card testing bot attacked a merchant's store.

105
Fraud attempts
in 20 minutes
0
Orders reached
payment gateway
92
Blocked by velocity
zero queries used
$0.07
Total MaxMind cost
to stop the attack

The Attack

A card testing bot hit the store with 105 checkout attempts in under 20 minutes, submitting $6.95 orders with randomized names, junk email addresses, and rotating between two IP addresses in the same subnet. The bot submitted 4–5 orders simultaneously on each attempt, trying to overwhelm the system.

The Defense

WolfPaw Antifraud's risk threshold instantly declined every fraudulent order — they all scored 99% risk. Not a single one reached the payment gateway. After 5 declines from the first IP, velocity protection kicked in and blocked the IP. The remaining 65 attempts from that IP were stopped instantly with zero MaxMind queries consumed.

On every blocked attempt, the session was destroyed and the cart emptied. The bot couldn't simply retry — it had to start completely over each time: new session, new cart, re-add products, re-enter all checkout data. This is what ultimately defeated it. When the bot rotated to a second IP address, velocity protection caught it again after 5 more queries and blocked the remaining 27 attempts. The bot gave up.

The Bottom Line

105 fraud attempts stopped. Zero orders reached the payment gateway. Zero chargebacks. Only 13 MaxMind queries consumed at a total cost of about 7 cents. The session destruction — what we call the "nuclear option" — is available on every platform: WooCommerce, Magento, Miva, and PrestaShop. It forces bots to rebuild everything from scratch, making automated card testing impractical.

What Merchants Are Saying

"I can't imagine a merchant wanting to be online without this fraud protection module."
Rick Wilson, CEO, Miva Inc.
"Some criminal was using my website to test credit card numbers. Your module has saved my business."
Joe Knoche, Echo Records
"We have been using your app for four years and have not had a chargeback. Love it."
Bob Tenney, thethreadexchange.com
"I've been using this module VERY successfully for several years now in our Miva store."
Cale Reeder, cozywinters.com

Powered by MaxMind minFraud

MaxMind's minFraud service analyzes over 80 data points per transaction — IP geolocation, email reputation, proxy detection, device fingerprinting, and transaction velocity across millions of merchants worldwide.

MaxMind Account Required
Queries cost approximately $0.005 each — about half a cent per order. New accounts qualify for a free trial with 1,000 queries.

Create a MaxMind Account →

Ready to Stop Fraud Before It Starts?

Choose your platform and start protecting your store today.

Contact Us