WooCommerce Anti-Fraud & Risk Scoring

核心功能

Weighted risk score computed on 20+ signals at checkout via WooCommerce order hooks before fulfillment

Card-testing and velocity-attack detection using sliding-window counters keyed on IP, browser fingerprint, and card BIN

Geo-distance checks comparing billing, shipping, and IP-geolocated country with configurable mismatch penalties

Proxy, VPN, Tor, and datacenter-ASN detection to flag anonymized traffic

Email reputation lookup: domain age, disposable/throwaway address detection, and free-mail flags

Phone number validity and country-match scoring

Configurable automatic actions: set order to on-hold, auto-cancel, queue for manual review, or blacklist

IP and email blacklist/whitelist managed from a dedicated wp-admin settings screen

Full HPOS compatibility — works on both legacy post-meta and high-performance custom order tables

Per-order risk breakdown stored as order notes and custom meta for transparent auditing

Protected REST API endpoint exposing scores and decisions for external dashboards and SIEM

WP-Cron scheduled refresh of reputation caches to keep lookups fast and current

Tunable thresholds and signal weights so you balance fraud capture against false declines

WPML and multisite aware; runs alongside Stripe, PayPal, and most WooCommerce gateways

Email/Slack alerts to staff when a high-risk order is held

按需定制，全程代劳

无需自行搭建——由 ECOSIRE 构建、安装并提供支持的可用应用。

您下单

以一次性构建价格开始。我们在启动时与您共同确定范围。

我们构建与安装

ECOSIRE 在您的 WooCommerce 上构建、配置并安装。

上线 + 支持

约 2–4 周内上线，并提供上线后的支持期。

关于此产品

WooCommerce Anti-Fraud & Risk Scoring is a build-to-order plugin that ECOSIRE develops, installs, and maintains directly on your WordPress site — not a one-click WooCommerce.com download. After you order, our engineers configure a risk engine tailored to your store, gateway, and traffic patterns, then hand you a working, supported install.

The plugin hooks into the WooCommerce order lifecycle (woocommerce_checkout_order_processed, woocommerce_new_order, and the gateway result via woocommerce_payment_complete) to compute a weighted risk score on 20+ signals before fulfillment. Signals include order velocity per IP/email/card BIN, billing-vs-shipping geo distance, proxy/VPN/datacenter ASN detection, email domain age and disposable-address reputation, phone validity, mismatched country vs IP geolocation, first-time-customer flags, and abnormal cart composition.

Card-testing and velocity attacks — the bursts of small authorizations that wreck a merchant's gateway reputation — are caught by sliding-window counters keyed on IP, fingerprint, and BIN, with thresholds you control from a dedicated wp-admin settings screen.

Each scored order gets a private order note plus a custom meta field, fully HPOS-compatible (works on both legacy post-meta and the new high-performance custom order tables). Rules trigger automatic actions: set order status to on-hold, auto-cancel, flag for manual review, or add the email/IP to a blacklist. Decisions are logged for audit and exposed over a protected REST API endpoint so you can feed your existing dashboards.

It runs cleanly alongside Stripe, PayPal, and most gateways, respects WPML/multisite, and uses WP-Cron for reputation cache refresh. Honest expectations: no fraud tool blocks 100% of fraud — this dramatically cuts chargebacks and card-testing while keeping false declines low through tunable thresholds.

你得到什么

Custom-built plugin installed and activated on your WordPress/WooCommerce site by ECOSIRE

Risk engine configured to your store's gateways, traffic geography, and product mix

wp-admin settings screen for thresholds, signal weights, actions, and blacklist/whitelist management

Tuned starting rule set calibrated against a sample of your recent orders

REST API endpoint documentation for integrating scores into your own dashboards

Admin handover/training session and a short operations runbook for reviewing held orders

30 days of post-launch support, threshold tuning, and WooCommerce/WordPress compatibility fixes

这是给谁的

Chargeback-Plagued Store Owner

Runs a card-accepting WooCommerce store and keeps losing money to chargebacks and friendly fraud. Wants risky orders held for review before they ship, without blocking legitimate customers.

Store Manager Fighting Card Testing

Sees waves of tiny failed authorizations that threaten the store's gateway standing. Needs velocity-based detection that automatically throttles and blacklists attackers at checkout.

Agency Developer Serving Merchant Clients

Manages WooCommerce sites for multiple clients and needs a maintainable, HPOS-compatible fraud layer with a clean REST API and admin UI, built and supported by a specialist rather than cobbled together in-house.

WooCommerce Anti-Fraud & Risk Scoring 如何比较

标准	伊科西尔	定制建造	竞争对手
Custom risk scoring across 20+ signals	包含	部分支持	部分支持
Card-testing / velocity-attack detection	包含	部分支持	部分支持
Built, installed and supported for you	包含	部分支持	不包括在内
HPOS / custom order table compatibility	包含	部分支持	部分支持
Tunable thresholds and automatic hold/cancel/blacklist actions	包含	包含	部分支持
Instant self-service download	不包括在内	不包括在内	包含
REST API access to scores and decisions	包含	部分支持	不包括在内
No per-transaction SaaS fees	包含	包含	部分支持

关于WooCommerce Anti-Fraud & Risk Scoring的常见问题

How long until the plugin is live on my store?

Because this is build-to-order, ECOSIRE configures and installs it for you rather than handing you a generic download. Typical delivery is about 5 to 7 business days from when we receive WordPress/staging access and a sample of recent orders for calibration. More complex multisite or multi-gateway setups can take a little longer; we confirm a firm timeline before starting.

What ongoing support and updates do I get?

Every build includes 30 days of post-launch support covering threshold tuning, bug fixes, and compatibility updates for new WooCommerce and WordPress releases. After that, we offer optional maintenance retainers. Because we built it for your specific site, updates are applied and tested by us — not pushed as an untested auto-update.

Will it block legitimate customers?

No fraud tool is perfect, and we don't claim 100% accuracy. The engine is tunable: every signal has a weight and every action has a threshold, so you can start conservative (hold for review rather than auto-cancel) and tighten over time. We calibrate the starting rules against your real order history to keep false declines low.

Is it compatible with HPOS and my page builder/gateway?

Yes. The plugin is built for WooCommerce High-Performance Order Storage (custom order tables) and also works on legacy post-meta. It hooks into the standard order lifecycle, so it runs alongside Stripe, PayPal, and most gateways, and is compatible with WPML and multisite. We verify against your exact stack during the build.

Where does the risk data live and can I access it?

Risk scores and the per-signal breakdown are stored on each order as order notes and custom meta on your own database — nothing about your orders leaves your control except the third-party reputation lookups you enable. Scores and decisions are also exposed over a protected REST API endpoint so you can pull them into your own dashboards or SIEM.