Advanced Fraud Prevention & Chargeback Defender for Magento 2

主な機能

IP geolocation, proxy/VPN and datacenter-ASN detection scored per order, with country/region allow and block rules configurable in admin

AVS (Address Verification Service) result evaluation plus email, phone and shipping/billing address consistency validation

Velocity rules — configurable thresholds for orders per email, per IP, per card BIN and per shipping address within a rolling time window

Blacklist / whitelist management for emails, IPs, domains, BINs and addresses, editable in the admin grid and importable via CSV or REST

Weighted risk scoring engine — each rule carries a tunable weight; orders crossing your threshold are auto-held via order->hold() before payment capture

Native order-status integration: flagged orders surface in a custom admin review grid with the triggered rules and full score breakdown shown per order

Built on Magento service contracts with observers on sales_order_place_after and a payment-authorization plugin (interceptor), so screening runs pre-capture

Admin ACL-gated configuration under Stores → Configuration → Sales, with granular resource permissions so only authorized roles edit rules or release held orders

Cron-driven maintenance — scheduled list expiry, score recalculation and aged-hold escalation, registered through crontab.xml

Optional REST and GraphQL endpoints to read an order's risk score, push/pull blacklist entries, or integrate a headless or PWA storefront

Per-store-view and per-website rule scoping for multi-store merchants, respecting Magento's configuration scope hierarchy

Full audit logging of every score, hold and manual release for chargeback dispute evidence, retained in a dedicated module table

受注生産、すべておまかせ

自分での設定は不要 — ECOSIRE が構築・インストール・サポートする実働アプリです。

ご注文

一回限りの構築料金から始めます。キックオフで一緒に範囲を決めます。

構築とインストール

ECOSIRE がお客様の Magento 2 上で構築・設定・インストールします。

本番稼働 + サポート

約2〜4週間で稼働し、リリース後のサポート期間が付きます。

この製品について

Advanced Fraud Prevention & Chargeback Defender is a custom Magento 2 module that gives SMB merchants their own fraud-screening layer — no per-transaction SaaS fees, no shipping your order data to a third party. It installs under app/code/Ecosire/FraudDefender as a standard composer-installable module and hooks into the native checkout and order lifecycle through observers on sales_order_place_after and a plugin (interceptor) on the payment authorization flow, so screening runs before the gateway captures funds.

The engine evaluates each order against a configurable rule set: IP geolocation & proxy/VPN detection, AVS and email/phone/address validation, velocity rules (orders per email, per IP, per card BIN, per shipping address within a time window), and blacklist/whitelist lists. Each rule contributes to a weighted risk score; orders crossing your threshold are automatically moved to Hold (order->hold()) and flagged for manual review in the admin grid, instead of silently fulfilling.

Everything is honest build-to-order. ECOSIRE builds it against your Magento version (Open Source or Adobe Commerce), wires it to whatever geo/IP data source you choose, and installs it on your store. You get a versioned module, full source, admin ACL-gated configuration under Stores → Configuration, a cron job for list maintenance and score recalculation, and service contracts plus optional REST/GraphQL endpoints so you can read risk scores from a headless front end or sync blacklists from another system.

This is not a one-click Adobe Commerce Marketplace download. It is a scoped engagement: we confirm requirements, build, install on staging, validate against real order patterns, then deploy to production — with a clear lead time and post-launch support.

得られるもの

Custom Magento 2 module under app/code/Ecosire/FraudDefender, composer-installable, with full source code and no encrypted/obfuscated files

Compatibility build targeting your exact Magento line (Open Source or Adobe Commerce) and PHP version, validated on your staging environment first

Installation performed by ECOSIRE: setup:upgrade, di:compile, static content deploy and cache flush, plus production cutover support

Admin configuration of your initial rule set, weights, score threshold and starter blacklist/whitelist, tuned to your order patterns

REST/GraphQL endpoint wiring (when in scope) with API documentation for risk-score reads and list synchronization

Technical handover doc covering rule configuration, ACL setup, cron schedule and how to release or escalate held orders

Post-deployment validation report showing screening on real/sample orders and a tuning pass to reduce false positives

Defined support window for bug fixes, plus a documented upgrade path for future Magento minor/patch versions

これは誰のためのものですか

Self-hosted SMB store owner

Runs Magento Open Source on their own VPS or cloud host, has seen a spike in chargebacks, and wants automated fraud control they own outright — without paying a percentage of every transaction to a fraud-scoring SaaS.

Magento store manager / operations lead

Manually reviews suspicious orders today and wants them auto-held and surfaced in one admin grid with a clear reason, so the team stops chasing fraud after the gateway has already captured payment.

Headless / Adobe Commerce merchant with a dev team

Runs a PWA or custom front end and needs fraud risk exposed via GraphQL/REST and rule data importable from existing systems, while keeping all customer and order data inside their own Magento install for compliance.

Advanced Fraud Prevention & Chargeback Defender for Magento 2 の比較方法

基準	エコシエール	カスタムビルド	競合他社	Magento 2 標準機能
Runs fully self-hosted — order data never leaves your Magento install	付属	付属	部分的なサポート	付属
Rule-based scoring (IP geo, AVS, velocity, blacklist) out of the engagement	付属	部分的なサポート	付属	含まれていない
Auto-hold suspicious orders before payment capture	付属	部分的なサポート	付属	含まれていない
Tuned to your specific order patterns during build	付属	付属	含まれていない	含まれていない
No per-transaction or percentage-of-revenue fees	付属	付属	含まれていない	付属
Instant availability / one-click install with no build wait	含まれていない	含まれていない	付属	付属
Full unobfuscated source you own and can maintain	付属	付属	部分的なサポート	付属
Machine-learning / global fraud network signals	含まれていない	含まれていない	部分的なサポート	部分的なサポート

Advanced Fraud Prevention & Chargeback Defender for Magento 2 に関するよくある質問

How long does delivery take, since this is built to order?

Typical lead time is about 2 to 4 weeks from a confirmed scope, depending on how many rules and integrations you need and your Magento version. After a short requirements call we build the module, install it on your staging environment for you to validate against real order patterns, then schedule the production cutover. We give you a firm date once scope is locked — there is no instant download because the module is compiled and tuned against your specific store.

Do I get ongoing support and updates after launch?

Yes. Every build includes a defined post-deployment support window for bug fixes, and a documented upgrade path for future Magento minor and patch releases. We can also agree an ongoing maintenance arrangement to keep the module compatible across major Magento/Adobe Commerce upgrades and to add new rules as your fraud patterns evolve. Because you receive full, unobfuscated source, your own developers can also maintain it.

Does this work on both Magento Open Source and Adobe Commerce?

Yes. The module is built against standard Magento 2 framework APIs — service contracts, plugins, observers and the admin configuration system — so it runs on both Magento Open Source and Adobe Commerce. We target your exact version line and PHP version at build time and validate on your staging instance. On Adobe Commerce we coexist with its native Signifyd integration rather than conflict with it; you can run this as your primary screen or as a complementary self-hosted rule layer.

Will fraud screening run before the payment is captured?

Yes. We hook into the order placement and payment authorization flow using an observer on sales_order_place_after and a plugin on the authorization step, so the risk score is calculated and the auto-hold decision is made before funds are captured. Held orders move to Magento's Hold status and appear in the review grid; nothing is auto-cancelled, so your team always has the final call to release or void.

Where does the IP geolocation and proxy data come from, and does my data leave the store?

You choose the data source. We can integrate a local MaxMind GeoIP2 database (no external calls, fully self-hosted) or a geolocation/proxy-detection API if you prefer live lookups. Order and customer data stays inside your Magento database — the module does not ship your orders to a third-party scoring service. If you opt for a live IP-reputation API, only the IP address is sent to that provider; everything else stays on your infrastructure.