Personally, I try to verify as much information as possible as the customer
creates an account. That includes verifying the format of the email address,
the phone number, the zip code etc.

Logically, a person's first/last name should be more than one character and
will contain no numbers. You can write code to check for that. There is a
lot you can verify even before you get to the credit card information.

For instance, not only can you verify account info as it is created, you can
work with a third party to make sure that the provided phone number matches
a particular address, that an address exists within a certain zip code, and
that a provided zip code actually exists. (It is amazing what info is
databased now-a-days.)

As far as credit card info, work with a third party that allows you to use
AVS (Address Verification System) and always capture a valid CCID (the 3 or
4 digit code on the back of all credit cards.) That will help i the
prevention of fraud.

If you implement steps like these, you will help to prevent the creation of
bogus accounts and or bogus credit card info.

As a result, I get no fake orders...the only thing I get are the occasional
customers who create a valid account but do not place an actual order. :(

HTH...Ché

-----Original Message-----
From: Samuel Neff [mailto:[EMAIL PROTECTED]
Sent: Friday, August 20, 2004 1:33 PM
To: CF-Talk
Subject: OT: Fake online orders--how common are they?

For people that run e-commerce sites, how common is it to get fake online
orders?  We get a ton of orders with details like

First Name: a
Last Name: b
E-Mail: [EMAIL PROTECTED]

etc.

Which of course don't go through.  They're all from different IP's and the
user is entering a semi-valid credit card number (at least valid according
to the mathematical validation--not valid in that the bank rejects it as an
invalid account).

Do others get a lot of these orders (we get more of these than real orders,
and we have plenty of real orders)?  Why do people do junk like this?  Are
there actually e-commerce sites out there that can be hacked like this
(seems impossible since I assume everyone is charging credit cards in
real-time)?

Thanks,

Sam
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings] [Donations and Support]

Reply via email to