• Resolved kwd

    (@kwd)


    Payment Plugins for Stripe WooCommerce Issues

    Issue #1: A client of mine is using Payment Plugins for Stripe WooCommerce and we are getting hit hard with stolen credit card orders which they fail once they go through Stripe. We are using guest checkout with option to create an account for faster checkout experience. What can we do to stop these bad actors from even placing orders? Do you have a plugin to stop these bad actors?

    Issue #2: We cannot use LINK payment option that is in this plugin because it makes legit orders fail. Stripe told us the ip address isn’t matching up and to reach out to the developer. We don’t know what to do about this, so we turned the LINK option off and we haven’t had a failed order in a few days. It’s something to do with the LINK part of your plugin. Has anyone else contacted you with same issues?

    I sent you an email with the subject line: FAILED ORDERS

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author Payment Plugins

    (@mrclayton)

    Hi @kwd

    What can we do to stop these bad actors from even placing orders?

    If a bad actor is attempting to purchase items using stolen card numbers then there isn’t much that can be done to conditionally determine if they are a “good” or a “bad” customer. This is where Stripe’s fraud tools come into play and as you confirmed, the payments are not going through which is good news.

    Do you have a plugin to stop these bad actors?

    Not at this time. It’s a significant challenge to create a plugin that determines who is a good and bad customer, without complete disrupting the flow of your eCommerce store.

    If these are scripted attacks, you can enable reCAPTCHA on your checkout page which should help mitigate card testing. You can also temporarily require an account during checkout.

    Stripe told us the ip address isn’t matching up?

    I don’t understand what that means. Stripe’s payment intent API doesn’t include a property for an IP address so that reply doesn’t make sense to me. Can you please provide more information such as the exact error message for one of these failed Link payments?

    Kind Regards

    Thread Starter kwd

    (@kwd)

    Sorry in the delay responding. I was misunderstanding what was happening on the clients site. Since I posted on here, I found out the legit orders were not leaving the website and it was due to having too many autoloads in the database turned on. I have since turned off the “hogs” and orders are now being processed. This will be the first thing I check if this happens again. He has also turned off guest checkout to cut down the bad actors trying to process stolen cards. Customers are now required to create an account at the cart stage.

    Stripe told us the ip address isn’t matching up? – Stripe shut down orders that did not match ip addresses…whatever that meant, I do not know. I am guessing referring to the bad orders (stolen cards).

    You gave me a lot of good information, so I am glad I contacted regarding to the issue. Thanks!

Viewing 2 replies - 1 through 2 (of 2 total)
  • You must be logged in to reply to this topic.