[Skip to main content](#vessel-content) # Reduce Brute Force Orders ## - **[mojooutdoors-holden](/forum/user/12526-mojooutdoors-holden "View mojooutdoors-holden's Profile")** - [![mojooutdoors-holden's Avatar](https://www.hikashop.com/media/kunena/core/svg/person.svg)](/forum/user/12526-mojooutdoors-holden "View mojooutdoors-holden's Profile") Topic Author - [ Offline](/forum/user/12526-mojooutdoors-holden) Less More - Posts: 303 - Thank you received: 18 - - 3 years 1 month ago [\#355679](#355679) by [mojooutdoors-holden](/forum/user/12526-mojooutdoors-holden "View mojooutdoors-holden's Profile") *[Reduce Brute Force Orders](/forum/25-install-update/907099-reduce-brute-force-orders#355679 "-- HikaShop version -- : 5.0.0 -- Joomla version -- : 4.3.4 -- PHP version -- : 8.1 After switching to auth.net payment plugin, I've noticed an uptick in the frequency of fraudulent charges (10 in last month vs 3 in several years with previous payment plugin). It seems scammers potentially have lists of valid credit card numbers and billing addresses, but send the order to different locations. I'm trying to figure out if this is a problem with the payment plugin or something else going on with the checkout after recent upgrade to joomla 4 and hikashop 5. You can see if the transaction logs that the same person is attempting to submit an order with the same email but cycling through billing addresses until one is successful. Any thoughts on how to help prevent some of this behavior on the hikashop side?")* was created by *[mojooutdoors-holden](/forum/user/12526-mojooutdoors-holden "View mojooutdoors-holden's Profile")* -- HikaShop version -- : 5.0.0 -- Joomla version -- : 4.3.4 -- PHP version -- : 8.1 After switching to auth.net payment plugin, I've noticed an uptick in the frequency of fraudulent charges (10 in last month vs 3 in several years with previous payment plugin). It seems scammers potentially have lists of valid credit card numbers and billing addresses, but send the order to different locations. I'm trying to figure out if this is a problem with the payment plugin or something else going on with the checkout after recent upgrade to joomla 4 and hikashop 5. You can see if the transaction logs that the same person is attempting to submit an order with the same email but cycling through billing addresses until one is successful. Any thoughts on how to help prevent some of this behavior on the hikashop side? The following user(s) said Thank You: [ssnobben](/forum/user/10468-ssnobben "View ssnobben's Profile") Please [Log in](/login?return=aHR0cHM6Ly93d3cuaGlrYXNob3AuY29tL2ZvcnVtLzI1LWluc3RhbGwtdXBkYXRlLzkwNzA5OS1yZWR1Y2UtYnJ1dGUtZm9yY2Utb3JkZXJzP3RtcGw9bWFya2Rvd24=) or [Create an account](/component/users/registration?Itemid=101) to join the conversation. - **[nicolas](/forum/user/63-nicolas "View nicolas's Profile")** - [![nicolas's Avatar](https://www.hikashop.com/media/kunena/avatars/resized/size144/users/avatar63.png?1793428657)](/forum/user/63-nicolas "View nicolas's Profile") - [ Offline](/forum/user/63-nicolas) Less More - Posts: 86357 - Thank you received: 14288 - - 3 years 4 weeks ago [\#355695](#355695) by [nicolas](/forum/user/63-nicolas "View nicolas's Profile") Replied by *[nicolas](/forum/user/63-nicolas "View nicolas's Profile")* on topic *[Reduce Brute Force Orders](/forum/25-install-update/907099-reduce-brute-force-orders#355695 "-- HikaShop version -- : 5.0.0 -- Joomla version -- : 4.3.4 -- PHP version -- : 8.1 After switching to auth.net payment plugin, I've noticed an uptick in the frequency of fraudulent charges (10 in last month vs 3 in several years with previous payment plugin). It seems scammers potentially have lists of valid credit card numbers and billing addresses, but send the order to different locations. I'm trying to figure out if this is a problem with the payment plugin or something else going on with the checkout after recent upgrade to joomla 4 and hikashop 5. You can see if the transaction logs that the same person is attempting to submit an order with the same email but cycling through billing addresses until one is successful. Any thoughts on how to help prevent some of this behavior on the hikashop side?")* Hi, I would need more information on the situation in order to say anything useful. For example, are you using the Authorize.net payment plugin in SIM or AIM mode ? In AIM mode, there is no 3DS support. 3DS allows for secure transactions by making sure that the user validates the transaction via the bank's app, or a code sent to his phone. Also, are you actually using this plugin or are you talking about the Authorize.net accept.js payment plugin from our marketplace ? Also, you're saying that some billing address are refused and some are accepted when creating an order. As far as I know, HikaShop will accept any address, unless you made some restrictions (like disabling zones, restricting the shipping or payment methods to some zones). Are you talking about this ? Or are you saying that the payment gateway is refusing the transactions ? Please [Log in](/login?return=aHR0cHM6Ly93d3cuaGlrYXNob3AuY29tL2ZvcnVtLzI1LWluc3RhbGwtdXBkYXRlLzkwNzA5OS1yZWR1Y2UtYnJ1dGUtZm9yY2Utb3JkZXJzP3RtcGw9bWFya2Rvd24=) or [Create an account](/component/users/registration?Itemid=101) to join the conversation. - **[mojooutdoors-holden](/forum/user/12526-mojooutdoors-holden "View mojooutdoors-holden's Profile")** - [![mojooutdoors-holden's Avatar](https://www.hikashop.com/media/kunena/core/svg/person.svg)](/forum/user/12526-mojooutdoors-holden "View mojooutdoors-holden's Profile") Topic Author - [ Offline](/forum/user/12526-mojooutdoors-holden) Less More - Posts: 303 - Thank you received: 18 - - 3 years 4 weeks ago [\#355737](#355737) by [mojooutdoors-holden](/forum/user/12526-mojooutdoors-holden "View mojooutdoors-holden's Profile") Replied by *[mojooutdoors-holden](/forum/user/12526-mojooutdoors-holden "View mojooutdoors-holden's Profile")* on topic *[Reduce Brute Force Orders](/forum/25-install-update/907099-reduce-brute-force-orders#355737 "-- HikaShop version -- : 5.0.0 -- Joomla version -- : 4.3.4 -- PHP version -- : 8.1 After switching to auth.net payment plugin, I've noticed an uptick in the frequency of fraudulent charges (10 in last month vs 3 in several years with previous payment plugin). It seems scammers potentially have lists of valid credit card numbers and billing addresses, but send the order to different locations. I'm trying to figure out if this is a problem with the payment plugin or something else going on with the checkout after recent upgrade to joomla 4 and hikashop 5. You can see if the transaction logs that the same person is attempting to submit an order with the same email but cycling through billing addresses until one is successful. Any thoughts on how to help prevent some of this behavior on the hikashop side?")* I am using the default authorize.net plugin (with AIM mode enabled) included with hikashop (not the JS one from marketplace). Even in AIM mode, authorize.net has some address verification filters to help with fraudulent accounts. However, it seems these nefarious users are using the same shipping address and seem to be rolling through lists of credit card and address combinations (brute force) until there is a successful transaction. I can see this in the payment transaction logs from authorize.net. E.g., there is a single user that has 15 transaction attempts for the same order but uses different credit card and address combinations until something works. We can catch before the order ships out, but I was wondering if there was some clever way to prevent this sort of behavior on the hikashop side. I can email you a copy of the transaction report from authorize.net to see this behavior if necessary. Please [Log in](/login?return=aHR0cHM6Ly93d3cuaGlrYXNob3AuY29tL2ZvcnVtLzI1LWluc3RhbGwtdXBkYXRlLzkwNzA5OS1yZWR1Y2UtYnJ1dGUtZm9yY2Utb3JkZXJzP3RtcGw9bWFya2Rvd24=) or [Create an account](/component/users/registration?Itemid=101) to join the conversation. - **[nicolas](/forum/user/63-nicolas "View nicolas's Profile")** - [![nicolas's Avatar](https://www.hikashop.com/media/kunena/avatars/resized/size144/users/avatar63.png?1793428657)](/forum/user/63-nicolas "View nicolas's Profile") - [ Offline](/forum/user/63-nicolas) Less More - Posts: 86357 - Thank you received: 14288 - - 3 years 4 weeks ago [\#355739](#355739) by [nicolas](/forum/user/63-nicolas "View nicolas's Profile") Replied by *[nicolas](/forum/user/63-nicolas "View nicolas's Profile")* on topic *[Reduce Brute Force Orders](/forum/25-install-update/907099-reduce-brute-force-orders#355739 "-- HikaShop version -- : 5.0.0 -- Joomla version -- : 4.3.4 -- PHP version -- : 8.1 After switching to auth.net payment plugin, I've noticed an uptick in the frequency of fraudulent charges (10 in last month vs 3 in several years with previous payment plugin). It seems scammers potentially have lists of valid credit card numbers and billing addresses, but send the order to different locations. I'm trying to figure out if this is a problem with the payment plugin or something else going on with the checkout after recent upgrade to joomla 4 and hikashop 5. You can see if the transaction logs that the same person is attempting to submit an order with the same email but cycling through billing addresses until one is successful. Any thoughts on how to help prevent some of this behavior on the hikashop side?")* Hi, Unfortunately, Authorize.net decided to stop supporting 3DS last year: [ support.authorize.net/knowledgebase/Know...icle/?code=000003582](https://support.authorize.net/knowledgebase/Knowledgearticle/?code=000003582) 3DS is a really nice way to ensure that transactions are legit since the customer has to validate the transaction with his smartphone. And thus, just getting your credit card stolen won't allow the robers to use it and someone can't just generate a credit card number and try the different date and CCV combinations until they find a match. I know that authorize.net has AVS : [ support.authorize.net/knowledgebase/Know...icle/?code=000001490](https://support.authorize.net/knowledgebase/Knowledgearticle/?code=000001490) I suppose you're already using it, and that's why most addresses are rejected. What you could do is to write a small plugin using the "onBeforeOrderCreate" event in order to count the number of orders being attempted, and block it after a specific threshold. Please [Log in](/login?return=aHR0cHM6Ly93d3cuaGlrYXNob3AuY29tL2ZvcnVtLzI1LWluc3RhbGwtdXBkYXRlLzkwNzA5OS1yZWR1Y2UtYnJ1dGUtZm9yY2Utb3JkZXJzP3RtcGw9bWFya2Rvd24=) or [Create an account](/component/users/registration?Itemid=101) to join the conversation. - **[mojooutdoors-holden](/forum/user/12526-mojooutdoors-holden "View mojooutdoors-holden's Profile")** - [![mojooutdoors-holden's Avatar](https://www.hikashop.com/media/kunena/core/svg/person.svg)](/forum/user/12526-mojooutdoors-holden "View mojooutdoors-holden's Profile") Topic Author - [ Offline](/forum/user/12526-mojooutdoors-holden) Less More - Posts: 303 - Thank you received: 18 - - 3 years 4 weeks ago [\#355745](#355745) by [mojooutdoors-holden](/forum/user/12526-mojooutdoors-holden "View mojooutdoors-holden's Profile") Replied by *[mojooutdoors-holden](/forum/user/12526-mojooutdoors-holden "View mojooutdoors-holden's Profile")* on topic *[Reduce Brute Force Orders](/forum/25-install-update/907099-reduce-brute-force-orders#355745 "-- HikaShop version -- : 5.0.0 -- Joomla version -- : 4.3.4 -- PHP version -- : 8.1 After switching to auth.net payment plugin, I've noticed an uptick in the frequency of fraudulent charges (10 in last month vs 3 in several years with previous payment plugin). It seems scammers potentially have lists of valid credit card numbers and billing addresses, but send the order to different locations. I'm trying to figure out if this is a problem with the payment plugin or something else going on with the checkout after recent upgrade to joomla 4 and hikashop 5. You can see if the transaction logs that the same person is attempting to submit an order with the same email but cycling through billing addresses until one is successful. Any thoughts on how to help prevent some of this behavior on the hikashop side?")* Yes, i am currently using AVS which helps out a lot with preventing fraud. The "onBeforeOrderCreate" counter would be very helpful in this case. I could see where this might be a useful tool for most Hikashop payment plugins. However, it's a little out of my wheelhouse to develop a plugin ![:(](/media/kunena/emoticons/22.png ":(") Please [Log in](/login?return=aHR0cHM6Ly93d3cuaGlrYXNob3AuY29tL2ZvcnVtLzI1LWluc3RhbGwtdXBkYXRlLzkwNzA5OS1yZWR1Y2UtYnJ1dGUtZm9yY2Utb3JkZXJzP3RtcGw9bWFya2Rvd24=) or [Create an account](/component/users/registration?Itemid=101) to join the conversation. - **[nicolas](/forum/user/63-nicolas "View nicolas's Profile")** - [![nicolas's Avatar](https://www.hikashop.com/media/kunena/avatars/resized/size144/users/avatar63.png?1793428657)](/forum/user/63-nicolas "View nicolas's Profile") - [ Offline](/forum/user/63-nicolas) Less More - Posts: 86357 - Thank you received: 14288 - - 3 years 4 weeks ago [\#355750](#355750) by [nicolas](/forum/user/63-nicolas "View nicolas's Profile") Replied by *[nicolas](/forum/user/63-nicolas "View nicolas's Profile")* on topic *[Reduce Brute Force Orders](/forum/25-install-update/907099-reduce-brute-force-orders#355750 "-- HikaShop version -- : 5.0.0 -- Joomla version -- : 4.3.4 -- PHP version -- : 8.1 After switching to auth.net payment plugin, I've noticed an uptick in the frequency of fraudulent charges (10 in last month vs 3 in several years with previous payment plugin). It seems scammers potentially have lists of valid credit card numbers and billing addresses, but send the order to different locations. I'm trying to figure out if this is a problem with the payment plugin or something else going on with the checkout after recent upgrade to joomla 4 and hikashop 5. You can see if the transaction logs that the same person is attempting to submit an order with the same email but cycling through billing addresses until one is successful. Any thoughts on how to help prevent some of this behavior on the hikashop side?")* Hi, I think this is specific to Authorize.net and thus it should not apply to most payment plugins since most payment gateways support 3DS and thus this kind of problem doesn't happen. Maybe first, it would be nice to see with Authorize.net what they recommend about your situation ? Maybe they have some other kind of protection than AVS, or maybe AVS can be configured to better handle the frauds you have ? Please [Log in](/login?return=aHR0cHM6Ly93d3cuaGlrYXNob3AuY29tL2ZvcnVtLzI1LWluc3RhbGwtdXBkYXRlLzkwNzA5OS1yZWR1Y2UtYnJ1dGUtZm9yY2Utb3JkZXJzP3RtcGw9bWFya2Rvd24=) or [Create an account](/component/users/registration?Itemid=101) to join the conversation. Board Categories HikaShop Install & Update Product & Category Display Content Creation Sales and Orders Orders management Reports & Statistics Customers Checkout Payment Methods Shipping Methods Import & Export (CSV, XLS…) Specific Features Affilation Taxes Wishlist Vote Carousel & Slider Mass Actions Filters & Search Discount & Coupon Feature Request Integrations Showcase General Talk about HikaShop Development HikaShop 3.0 Beta Translation Commercial Jobs HikaShop Components HikaMarket Market: Feature requests Market: How to? Market: Bug Report HikaSerial General talk about HikaSerial Serial: Bug Report Serial: How to? Support en Français de HikaSerial (French Support) HikaSubscription HikaAuction Auction: Feature requests Auction: How to? Auction: Bug report Hikashop around the world Support en Français (French Support) Russian FAQ. Курс выживания с Hikashop. Частые вопросы и о Расширения Hikashop Наши сайты на Hikashop 日本語版サポート(Japanese Support) Thai German Archives Bug Report How to? [](/forum/topics/feed/mode-topics?format=feed&type=rss) Time to create page: 0.083 seconds [Powered by](/forum/credits) [Kunena Forum](https://www.kunena.org)