IPGeolocation FraudShield

FraudShield checks the buyer’s IP address when an order is placed and assigns a fraud risk score from 0 to 100. Based on that score, orders can be automatically held, cancelled, or flagged for manual review. The store admin can also receive email alerts with a full breakdown of what triggered the score.

The check runs after order creation so it has no impact on checkout speed or customer experience.

How it works

FraudShield connects to the ipgeolocation.io Security API and evaluates the response against the fraud signals you have enabled. The score is calculated as:

(sum of triggered signal weights) / (sum of enabled signal weights) x 100

This keeps scoring consistent regardless of how many signals you have turned on.

Fraud signals

• Country mismatch (billing country vs IP country)
• VPN detected
• Tor exit node
• Proxy detected
• Residential proxy
• Known attacker IP
• Bot traffic
• Spam source
• Cloud or datacenter IP

Risk tiers

• Low: 0 to 40
• Medium: 41 to 70
• High: 71 to 100

Features

• Automatic fraud check on every new order
• Toggle individual signals on or off
• Adjustable weight per signal
• Critical override option to force a score of 100 on any signal
• Hold, cancel, or flag high-risk orders automatically
• Email alerts with signal breakdown
• Configurable score thresholds for alerts and actions
• Dashboard with order stats and trends
• Fraud log with filtering and search
• Risk score column in the orders list
• Per-order fraud details panel in the admin
• Test mode with predefined IPs for safe testing
• Log retention control

External service

This plugin uses the ipgeolocation.io API to look up IP address data. When an order is placed, the customer’s IP address is sent to ipgeolocation.io servers to retrieve security information used for fraud scoring. No other personal data is transmitted.

Please review their policies before using this plugin:

• ipgeolocation.io website: https://ipgeolocation.io
• Terms of service: https://ipgeolocation.io/tos.html
• Privacy policy: https://ipgeolocation.io/privacy

An API key from ipgeolocation.io is required to use this plugin. A free plan is available. Some signals require a paid plan.

Development

Development takes place on GitHub: https://github.com/devjfreaks/fraudshield

Support

For help with setup or configuration, contact us at https://ipgeolocation.io/contact.html

Third Party Libraries

This plugin includes Chart.js v4.5.1 for admin dashboard charts.
License: MIT
Source: https://www.chartjs.org
License URI: https://github.com/chartjs/Chart.js/blob/master/LICENSE.md