Fraud Prevention for WordPress

Free plugin

What the free plugin does

HULO Fraud Prevention works on any WordPress site. It scores the payments taken through HULO Payments (payment forms, pay links, the hosted payment page) and can refuse the risky ones before they are charged. With WooCommerce it also scores every shop order.

• Payments (HULO Payments): each payment is scored before the charge is confirmed, from local data only so the payment page never waits, and scored again in full once it is paid or authorised.
• Shop orders (WooCommerce, optional): every order placed through the classic checkout or the Checkout block is scored in the background a few seconds later. The checkout never waits.

Each signal adds weighted points, and every weight can be changed. The total from 0 to 100 maps to low, medium, review or blocked through your own thresholds.

Signals

• Blocklisted e-mail, e-mail domain, IP address or IPv4/IPv6 CIDR range (manual lists, plus any feed rows an add-on syncs)
• Disposable e-mail domains (built-in list)
• Plus-addressed e-mails. Velocity is counted by canonical identity, so [email protected], [email protected] and [email protected] are one customer
• Payment/order velocity per IP (hour and 24 hours) and per e-mail (24 hours), and daily value per e-mail, across payments and orders alike
• Identity fan-out: three or more e-mail addresses paying from one IP in 24 hours
• Value ceiling, and a high-value first purchase
• Returning customers with paid payments or orders lower the score
• Failed payments from the same IP in the last hour (declines reported by HULO Payments, and failed shop orders)
• Billing and shipping country or postcode differ
• High-risk billing countries (your list)
• E-mail domain without MX records, gibberish e-mail local parts
• Card checks recorded by HULO Payments: AVS postcode and street, CVC, a failed 3-D Secure authentication, the Radar risk level, and a card issued in another country than the billing address
• Optional IP intelligence (VPN/proxy, datacentre, IP country vs billing country), off by default

Modes

• Off: payments and orders are still scored (shadow), so the history has no gaps, but nothing is flagged.
• Monitor: everything is scored and logged; risky ones are flagged.
• Hold: as Monitor, and a payment that reaches the block threshold is refused before it is charged, with a neutral message to the customer. A paid shop order at the review threshold is put On hold with a note listing the signals.

Admin (HULO → Fraud Prevention)

• Overview, an activity log you can filter by payments or shop orders, rules and signal weights, block and allow lists, a simulator that scores a made-up payment without logging it, and a customer lookup by e-mail across payments and orders.
• With WooCommerce: a Fraud risk box on every order and a Fraud risk column in the orders list.
• A dashboard widget with the last seven days.
• Without WooCommerce, amounts use the currency you set under Settings (GBP by default).

For developers

• hulo_fraud_prevention_is_assessed( $id, $source ): true once a record (source hulo_payments or woocommerce) has been scored.
• REST: GET /wp-json/hulo-fraud-prevention/v1/assessment/<source>/<id> (admins), and a rate-limited public pre-check POST /wp-json/hulo-fraud-prevention/v1/check with email, orderValue and countryCode. It returns only allowed and riskLevel.
• Filters and actions: hulo_fraud_prevention_card_checks, hulo_fraud_prevention_failed_payments, hulo_fraud_prevention_paid_count, hulo_fraud_prevention_signals, hulo_fraud_prevention_action, hulo_fraud_prevention_refuse_payment, hulo_fraud_prevention_assessed.

Fraud Prevention Pro

The Pro add-on adds:

• Enforce mode. Block-level payments are refused before they are charged. Review-level payments wait in a review queue: approve captures an authorised (manual-capture) payment, and reject releases the authorisation or refunds a captured payment. With WooCommerce, risky orders wait in a "Fraud review" order status and are cancelled and refunded on reject.
• Auto-approval after a set number of hours, and blocklisting the identity on reject
• With WooCommerce, a fulfilment gate: downloads stay locked and virtual orders do not auto-complete until the order has been scored and cleared
• Nightly threat feeds (FireHOL Level 1, Spamhaus DROP, Tor exit nodes, disposable e-mail domains) and your own feed URLs
• E-mail alerts; Slack, Discord, Teams, Telegram or webhook alerts; customer messages; and a weekly report

Try Pro free for 14 days, no card: https://huloglobal.com/wordpress-plugins/fraud-prevention/

Pricing

Free, then Pro when you want it

Prices follow the currency picker at the top of the page; the checkout bills in GBP, USD, EUR, AUD and CAD. One licence covers one WordPress site.

FAQ

Frequently asked questions

Changelog

0.1.0

• First release: works on any WordPress site. HULO Payments payments are scored before the charge (Hold mode refuses block-level payments) and in full after it. With WooCommerce, orders are scored in the background. Monitor and Hold modes, block and allow lists with CIDR ranges, card AVS / CVC / Radar / 3-D Secure signals, activity log, simulator, customer lookup, order box, orders list column, dashboard widget, REST routes.