Velocity Attacks

Antifraud – Protecting against Velocity Attacks

Handling 100’s of fraudulent orders

You may have installed our plugin as you’ve been hit with hundreds of fraudulent orders.

It can be a shock to start your day handling issues such as hundreds of fake, fraudulent orders from overnight, which can often result in flow-on effects. These may include your bank or 3rd party merchant banking provider suspending your account or sending you a large bill.

We refer to this sort of activity as a velocity attack. It is quite common but easily resolved in most cases.

Preventing Velocity Attacks with this plugin

↑ Back to top

Normally we can block these attacks by configuring the plugin appropriately. The main setting you need to configure in the plugin is the reCaptcha tool. Configuring reCaptcha within the Anti-Fraud plugin removes the ability of a fraudster to commit mass credit card fraud. This is the easiest way to prevent this fraud, however, it is not always effective.

The plugin is not stopping Velocity Attacks!

↑ Back to top

The plugin is effective at stopping velocity attacks. But this is not the case when there is another problem on your site that is rendering it ineffective. A good analogy here is, imagine you have decided to increase security in your house by installing a deadlock on the door. You then leave home, but leaving the back door wide open. While there is increased security on the front door, it is only as effective as the weakest point in your home security.

To sum this up, where reCaptcha has been set up within our plugin, and the issue persists, it indicates one or more of the following:

-Your site has a general security vulnerability – such as non-secure hosting.
-A plugin on your website has a security vulnerability.
-Your website has been hacked and is infected with malware.

Where this is the case, the plugin will not work effectively and you will continue to experience problems.

Help with Velocity Attacks – Next Steps:

OPMC works with both non-technical e-commerce store owners, as well as developers and agency partners who are not specialised in security, to solve these issues.

We are therefore experienced in handling these various scenarios quickly and cost-effectively. Please contact us through WooCommerce.com Support selecting this plugin and we can provide prompt expert advice to resolve this matter.