Settings

First of all, you can enable the YITH Anti-Fraud plugin rules:

Then, from the General Settings you can start configuring:

• Settings for risk thresholds
• Email blacklist settings
• Addresses blacklist settings
• PayPal settings

Settings for risk thresholds

In this specific section from the General settings, you can set the thresholds of fraud risk to mark an order as medium or high risk.

• Medium Risk threshold: orders that get this value will be marked as “medium risk”.
• High Risk threshold: orders from this value up will be marked as “high risk”.

So, based on the image above:

• orders that get 0% to 24% > low risk
• orders getting 25% to 74% > medium risk
• orders getting 75% to 100% > high risk

Whatever the risk threshold, by default, the plugin does not block any order, and the payment will be processed anyway. Yet, if you want to prevent payments from orders with a high risk only, you can enable the Check for high risk at checkout option and automatically cancel orders that get the “high risk” label.

• Check for high risk at checkout: enable this option to calculate the risk at checkout and automatically cancel the order if it gets the “high risk” label.

Please note: this option calculates the risk before processing the payment. However, some payment gateways bypass WooCommerce validation, preventing the plugin from performing the check before the payment is through. WooCommerce plugins like Stripe, WooPayment, and PayPal are currently not affected.

• Error message: configure the custom message that you want to show at checkout when the order is cancelled for “high risk”.

The risk is calculated based on the weight of the plugin rules. You can refer to this page to read more information about how the risk is calculated.

Email blacklist settings

From this section you can Enable the email blacklist, so you can block automatically all orders coming from specific emails you have added in the Blacklist.

The plugin also allows to automatically add an email address to the blacklist, if it’s considered high fraud risk. You only need to enable the option “Enable automatic blacklisting”.

To read more information about the Blacklist, you can refer to this post.

Addresses blacklist settings

With the option Enable address blacklist you can automatically block all orders coming from one or more billing and shipping addresses you have added in the Blacklist .

Make sure you set also the Percentage of similarity: this determines how closely an email must match those on the Blacklist to be flagged as high risk and result in the order being canceled. The lower this value, the stricter the check will be. If you want this check to pass only with a perfect match, set this to 100%.

The plugin also allows you to automatically add a billing or shipping address to the blacklist, if it’s considered high fraud risk. You only need to enable the option “Enable automatic blacklisting”.

To read more information about the Blacklist, you can refer to this post.

PayPal settings

From the PayPal settings you can Enable PayPal verification, which allows you to check if the payment request coming from a specific PayPal account is completed by the actual owner of the account, and by no one else that could have stolen the account or the account credentials.

• Prevent downloads if verification failed or still processing: activate it if you wish to prevent downloads of digital products if the PayPal verification is not completed successfully.

When there is a new payment request, the plugin will automatically send an email to the PayPal address entered. The order is completed only if the user confirms the account by clicking on the verification link sent in the email.

You can configure this email notification from the Email Settings, click here to read more information about it.

In case the account is not confirmed after the first email has been sent, the plugin will send a new email after a specified number of days. You can set the number of days with the option Time span before further attempts.

The order is automatically canceled if the account still isn’t verified after a specified number of days that you can set in Time span before the orders are cancelled.

Once you’ve verified the email address, it will be added to the list with verified email addresses automatically. The verification process will no longer be repeated for that email address with orders that follow. You can also add a new PayPal address manually from the PayPal Verified Addresses tab.

Once you have enabled the email blacklist, you will see the Blacklist tab in the plugin settings where can add the emails addresses:

And Billing/Shipping addresses, so that the orders using the you have added to the list will be automatically cancelled:

As an example, we have added the email [email protected] and the billing address 700 Renown Street, Johannesburg 2101, South Africa, Gauteng to the blacklist. Every time you receive an order from that email or using that Billing address, the order cannot be processed, therefore the risk percentage will not be calculated.

The order is automatically set to Cancelled status, which applies when the fraud risk check doesn’t pass.

The owner, however, can change the order status and process it, at their own risk.

In case you want to unblock one of the blacklisted email addresses and check the real risk level of the order, you can do the following:

• remove the email and/or billing address from the blacklist;
• change the order status to “On Hold”;
• click on the button “Repeat Check”.

Once the check is finished, it will show the actual risk level percentage of the order.

From this tab you can see the list PayPal verified emails. When there is a new payment request, the plugin sends an email automatically to the PayPal email address to verify it. Once the user clicks on the verification link, the email is added to the list.

However, you can also add an email manually clicking on the Add email button

You can configure the settings related to the PayPal verification from the General settings of the plugin, you can refer to this page.

From the Email Settings tab you can manage the notifications sent by the plugin. There are two available:

• Anti-Fraud PayPal Verification: Sent to the customer to check the PayPal account.
• Anti-Fraud Admin Notification: Sent to admin when the anti-fraud check is performed.

You can edit each one by clicking on the pencil icon:

Anti-Fraud PayPal Verification

Under the Content tab, you can customize the email heading and notification message, using the available placeholders. You’ll also be able to see your changes in real-time with the live preview.

Under the Configuration tab, you can edit the subject and choose the email type (HTML or Multipart). You can also add an email address to send a test email and preview how it looks when the customer receives it.

Anti-Fraud Admin Notification

From the Content tab you can edit the email heading and the message content, you can check the changes in the live preview.

From the Configuration tab you can edit the subject, select the email format (HTML or Multipart), and add recipient(s) for the notification. You can also specify a test email address to preview the notification. Additionally, you can choose the test content to determine how the email will appear for different risk levels (low, medium, or high) when the check has been performed