Useful Fraud Detection API



It may not be as useful as you think - what happens if you are behind a proxy. You need to really be careful if you are promoting something like this. Technology is a "tool" not the cure.
 
Their implementation looks very, very similar to Maxmind as well. Basically a free version of MM. Been using MM for years now and don't see a reason to switch.
 
It may not be as useful as you think - what happens if you are behind a proxy. You need to really be careful if you are promoting something like this. Technology is a "tool" not the cure.

if someone is placing an order through an open proxy that is listed on dnsbl or spamhaus, then i think i'll feel safe turning away their business.
 
Hmm true about proxies I did not think about that. Also wanted to spur a discussion about which technology or technique is the best.
 
Hmm true about proxies I did not think about that. Also wanted to spur a discussion about which technology or technique is the best.

maxmind's minfraud is a good start for someone who doesn't have the capability to develop one or spend money on something higher end.

disclosure: i provide fraud management for clients and i'm probably biased since people pay well for this ;)
 
high risk - i am also in the compliance/ internet privacy fraud biz and I agree we may have some bias, but at the end of the day not all of us can afford a high end infrastructure. especially when 95% of us never turn a dime of profit.
 
@high risk; taking shots at evelyn? :)

MM lifts some of the most basic tasks involved in pci screening, which is enough for some, not enough for others, but that's the product's bottom line... and honestly it does it well.

PCI screening is huge. My personal workflow contains over 20 criteria, several not even limited to just environment checks alone. MM's API fulfilling only a handful of criteria among it all.

I wouldn't even recommend MM as a beginning solution. It's more on the intermediate, or at least 'understanding' level. Where I do think MM proves itself the most is with small (<100 transactions/day) businesses. Once a business steps into ~1000 trans/day territory they should rightfully go custom.
 
@high risk; taking shots at evelyn? :)

MM lifts some of the most basic tasks involved in pci screening, which is enough for some, not enough for others, but that's the product's bottom line... and honestly it does it well.

PCI screening is huge. My personal workflow contains over 20 criteria, several not even limited to just environment checks alone. MM's API fulfilling only a handful of criteria among it all.

I wouldn't even recommend MM as a beginning solution. It's more on the intermediate, or at least 'understanding' level. Where I do think MM proves itself the most is with small (<100 transactions/day) businesses. Once a business steps into ~1000 trans/day territory they should rightfully go custom.

not at all.. i was saying that maxmind's minfraud+etc is a great start for someone if they can't afford a custom solution. and yes, i agree, once someone gets well above the 100/day mark or has excessive fraud issues they should really look into going custom.

my system uses a many of the same datapoints minfraud does, but goes way beyond those and their methodology - just like i'm sure yours does.