[ic] interchange-users Digest, Vol 233, Issue 2

[Hillary Corney]

“Is there currently any way to limit the number of successful 
transactions per customer per day?”

look up “fail2ban” https://github.com/fail2ban/fail2ban <https://github.com/fail2ban/fail2ban>

It is designed to lock out IP addresses with too many failed connections.

It is probably possible to modify it to lock out Ip’s with failed purchases instead.


Hillary
07919 488425
zen71001 at zen.co.uk



> On 26 Feb 2025, at 12:00, interchange-users-request at interchangecommerce.org wrote:
> 
> Send interchange-users mailing list submissions to
> 	interchange-users at interchangecommerce.org
> 
> To subscribe or unsubscribe via the World Wide Web, visit
> 	https://www.interchangecommerce.org/mailman/listinfo/interchange-users
> 
> or, via email, send a message with subject or body 'help' to
> 	interchange-users-request at interchangecommerce.org
> 
> You can reach the person managing the list at
> 	interchange-users-owner at interchangecommerce.org
> 
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of interchange-users digest..."
> 
> 
> Today's Topics:
> 
>   1. limiting number of transactions per customer per day
>      (davideth at whojamadoogle.com)
>   2. Re: limiting number of transactions per customer per day (DB)
> 
> 
> ----------------------------------------------------------------------
> 
> Message: 1
> Date: Tue, 25 Feb 2025 13:57:39 -0600
> From: "davideth at whojamadoogle.com" <davideth at whojamadoogle.com>
> To: interchange-users at interchangecommerce.org
> Subject: [ic] limiting number of transactions per customer per day
> Message-ID: <10c37d1e-6c76-4339-9708-8705a84dff84 at whojamadoogle.com>
> Content-Type: text/plain; charset=UTF-8; format=flowed
> 
> <http://www.icdevgroup.org/> Currently using 5.10.0
> 
> 
> I have noticed a current issue with fraudulent charge attempts. These 
> are being used to verify stolen cards.
> 
> 
> A false customer is using a bot to place successive orders to verify 
> that a card is being accepted. About 1000 order attempts from one 
> customer today with about 6 actually being successful but having a 
> billing address mismatch.
> 
> 
> Is there currently any way to limit the number of successful 
> transactions per customer per day?
> 
> Is the a way to limit the number of failed transaction attempts per day?
> 
> TIA, David
> 
> 
> 
> ------------------------------
> 
> Message: 2
> Date: Tue, 25 Feb 2025 15:03:54 -0500
> From: DB <db at m-and-d.com>
> To: interchange-users at interchangecommerce.org
> Subject: Re: [ic] limiting number of transactions per customer per day
> Message-ID: <d824a828-ef2d-4368-870a-0d381bd623a6 at m-and-d.com>
> Content-Type: text/plain; charset=UTF-8; format=flowed
> 
> On 2/25/25 2:57 PM, davideth--- via interchange-users wrote:
>> <http://www.icdevgroup.org/> Currently using 5.10.0
>> 
>> 
>> I have noticed a current issue with fraudulent charge attempts. These 
>> are being used to verify stolen cards.
>> 
>> 
>> A false customer is using a bot to place successive orders to verify 
>> that a card is being accepted. About 1000 order attempts from one 
>> customer today with about 6 actually being successful but having a 
>> billing address mismatch.
>> 
>> 
>> Is there currently any way to limit the number of successful 
>> transactions per customer per day?
>> 
>> Is the a way to limit the number of failed transaction attempts per day?
>> 
>> TIA, David
>> 
> 
> I'm not sure about solutions currently in Interchange itself, but I know 
>  that Authorize.net (and likely others) have what's called 'velocity' 
> limits which may help.
> 
> From 
> https://account.authorize.net/help/Tools/Fraud_Detection_Suite/Transaction_Filters/Transaction_IP_Velocity_Filter.htm
> 
> "The Transaction IP Velocity Filter allows you to limit the number of 
> transactions received from the same Internet Protocol (IP) address per 
> hour.... "
> 
> DB
> 
> 
> ------------------------------
> 
> Subject: Digest Footer
> 
> _______________________________________________
> interchange-users mailing list
> interchange-users at interchangecommerce.org
> https://www.interchangecommerce.org/mailman/listinfo/interchange-users
> 
> 
> ------------------------------
> 
> End of interchange-users Digest, Vol 233, Issue 2
> *************************************************

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.interchangecommerce.org/pipermail/interchange-users/attachments/20250226/7b87635d/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 1385 bytes
Desc: not available
URL: <https://www.interchangecommerce.org/pipermail/interchange-users/attachments/20250226/7b87635d/attachment.bin>