Fraud Protocols
Learn how to spot and stop fraud protocols like fake member signups and bad orders, plus steps to protect your Photo Finale site.
Fake Members
If you see a lot of new members, you may seeing a targeted automated credential testing attack. Let us our support team know! We have tools in place already and can adjust settings on this side to curb this unwanted activity.
Bad Orders
Your site can be accessed by anyone, thus opening it up to fraudulent orders. We have many layers of security in place, but if it's a person entering valid data in (just like a customer would!), it can be difficult to detect. If you see a strange pattern in orders coming in, it may be a bad player testing credit card numbers.
Here's what to do:
- Disable the products they are ordering. They could switch to others, but this can at least delay.
- Cancel orders. For PF-managed suppliers, contact us. For third-party Marketplace Fulfillment partners, contact them or use their portal to cancel.
- Check your payment gateway account. You should have AVS enabled, and double check if there are any other security settings you can turn on to help.
- Contact Photo Finale support to report the incident and to take any further possible measures.
- Refund any charges that have gone through.
Then:
- If you aren't using Stripe, we highly recommend switching to it. They have much better fraud detection than some of the other payment processors.
- Take a look at adding the Marketplace Bundle to your site - this adds an Order Review page to myLab that allows you to know what's being ordered and approve each order manually or automatically, based on settable filters.
