Configuring SimpleFraud for WHMCS

1 post / 0 new
sidgrafix
Configuring SimpleFraud for WHMCS

  • Once the SimpleFraud add-on has been activated in WHMCS you have access to the built in documentation which has quick links and shortcuts available to aid in and speed up the configuration process, additionally this documentation serves as a quick means to help.
  • PLEASE NOTE: if this is your first time trying to access the built in documentation you need to make sure in the addon configuration you have selected an administrative role group allowing access or the addon will not display and the documentation will be unavailable. Scroll down to Number 4 of the Adding your SimpleFraud License Key and SimpleFraud ID section just below this area
  • To access SimpleFraud documentation navigate to the WHMCS main menu "Addons" and find "SimpleFraud" in the drop-down list of your available active add-ons. Addons -> SimpleFraud
    -image here-
  • Use the sub-menu item SimpleFraud Suite -> Documentation or when the SimpleFraud case console opens you notice in the WHMCS sidebar there will be a SimpleFraud group of links, in the group find the "Documentation" page link.
    -image here-
  • Select "Documentation" from the sidebar and SimpleFraud's built in "Help and Support" documentation will open.
    -image here-
  • Advanced WHMCS users familiar with configuring add-on modules for WHMCS can use this documentation to complete the configuration process quickly or as a quick reference should you have a question regarding any particular setting, feature or process.
  • Either way we highly recommend all users take advantage of the built in documentation which also includes shortcuts to configurable options.

Adding your SimpleFraud License Key and SimpleFraud ID

The first thing you are going to need to do once SimpleFraud has been activated is to add your SimpleFraud license key and unique SimpleFraud ID in the configuration settings for WHMCS add-ons.

Your license key is only available by logging into your client area on DevelopFX.com and going to your SimpleFraud service page "the same place you downloaded your SimpleFraud installation package from!"

Everything associated with your SimpleFraud account can always be found from your client area service page, including all your SimpleFraud account information and the platform(s) details that you signed up for.

Please Note: For security reasons the SimpleFraud license key is not included in the welcome email and can only be obtained from your client area when logged into your account on DevelopFX.com

  1. By this point you should have your license key handy and be logged into your WHMCS installation as an administrator. Navigate to WHMCS Setup -> Addon Modues (the same place you were to activate SimpleFraud) scroll down the list of available add-ons until you see SimpleFraud and to the right select the "Configure" button.

    • If you are using the built in "Documentation" as listed above, you can simply click on any of the "Configure" buttons like -image here- located in various sections of the documentation and go directly to the SimpleFraud add-on module configurations.

  2. At the very top of the configuration area you should see SimpleFraud License followed by an empty field. Paste or type your license key into the field.

    -image here-

  3. If you have your SimpleFraud ID handy you can enter it into the field below where you just put your license key next to where it says SimpleFraud ID, if not you can get it and enter it later when you add your platform API key.

  4. Next scroll down to the bottom of the configuration area and before you save, configure the Administrative Settings

    • You need to set a WHMCS API admin user, you can select the appropriate account from the provided select list. Please Note: this is required for SimpleFraud to communicate with your WHMCS installation and requires an account that has local WHMCS API access.

      -image here-

    • Below were you selected the API admin user you also need to choose what administrative role group will have access control to SImpleFraud

      Please Note: the role group you specify will be able to change settings and configurable options as well as use the features built into the case console and dashboard.

      -image here-

  5. Next click on the "Save Changes" button at the bottom of the configuration area to save your settings. It is important to always click the "save Changes" anytime you make changes to your settings in order for them to take affect.

Adding your API Key(s) and Configuring your Platform(s)

Now that SimpleFraud is licensed your going to want to add the API key(s) for the platform(s) you signed up for and then adjust the configurable setting to your needs.

All the information you need should have been provided to you in the "Welcome/Account Activated" email you received to complete the following steps. As listed above you can also get this information directly form your account on DevelopFX.com under the SimpleFraud service you are installing (The same place you originally downloaded the SimpleFraud installation package - prior to activating SimpleFraud in WHMCS for the first time.)

  1. First if you aren't already logged into your WHMCS installation as an administrator, do so now. Then navigate to WHMCS Setup -> Addon Modues (the same place you were to activate SimpleFraud) scroll down the list of available add-ons until you see SimpleFraud and to the right select the "Configure" button.

    • If you are using the built in "Documentation" as listed above, you can simply click on any of the "Configure" buttons like -image here- located in various sections of the documentation and go directly to the SimpleFraud add-on module configurations.

    • Please Note: If you skipped entering your SimpleFraud ID when you added the license key to the configuration settings you will need to do that now, in the appropriate spot at the top of the configuration settings by pasting or typing it in now.

  2. If you are using the Advanced ScorePlus platform scroll down the configuration area a little until you see Advanced ScorePlus on the left side of the configuration table.

    If you are using the Guaranteed CompletePlus platform you'll notice that section listed below the Advanced ScorePlus configuration area.

    -image here-

  3. Next paste or type your Advanced ScorePlus or Guaranteed CompletePlus API key into the input field labeled with "API Key" for the platform you are using. DO NOT put a CompletePlus API key where the ScorePlus API goes and DO NOT put an Advanced Score Plus API key where the CompletePlus API key goes, doing so will cause SimpleFraud to function improperly.

    If you are using both platforms you will have an API key for each meaning you will input a total of 2 API keys. PLEASE BE CAREFUL: DO NOT MIX UP YOUR API KEYS OR YOUR INSTALLATION WILL NOT WORK PROPERLY.

    -image here-

  4. Now you need to configure the available options for the platform you are using.

    For those of you using the Advanced ScorePlus platform you essentially have one setting to worry about - the "Fraud Min-Score" value. If you are using Guaranteed CompletePlus skip down to the next section STEP: 5

    • The Fraud Min-Score is the score used to compare against when an order is checked for fraud, if the order returns a score lower than your set Min-Score; WHMCS will treat the order as fraud; Orders returning a score above your Min-Score will be treated as good and will be accepted by WHMCS. You can set a Min-Score value anywhere from 0 to 1000. The lower the score the more likely the order is fraudulent.

    • By Default: this will have a set value of 500. However for digital goods and service providers or WHMCS we would recommend starting with a Min-Score somewhere between 320 and 400 - once you see some of the scoring results from when fraud is checked during the order process in your case console in comparison to your average client type(s) you can make a better decision on where to set your Min-Score.

    • Set the Fraud Min-Score now by typing your Min-Score in the provided field in the Advanced ScorePlus settings, just under where you added your API key

      -image here-

  5. For those of you using Guaranteed CompletePlus you have a couple of additional settings you can take advantage of:

    • Aside from the default feature of CompletePlus which allows SimpleFraud to "Deny" or "Approve" orders based on the order being approved or denied for a guarantee against chargeback when fraud check is run during the order process.

    • As a bonus you can also use the Advanced ScorePlus platform as a fallback should the initial guarantee request which is made during the order process be denied!

    • Using Advanced ScorePlus allows you to use the Fraud Min-Score as a kind of Second Opinion.

    • Please Note: To use this feature you would normally need to be using both platforms, however while the Guarantee CompletePlus platform is in BETA we are allowing the use of this fallback feature without the use of the Advanced ScorePlus API key that would normally be required.

    • To Activate this feature simply "tick" the check-box next to where it says "Default to Score" under where you added your CompletePlus API key.

    • Please Note: If you activate this feature you need to set a Fraud Min-Score in the Advanced ScorePlus configurable settings, see STEP: 4 above for specific details about setting the Fraud Min-Score.

      -image here-

    • The last option that is currently available for Guarantee CompletePlus is "Pending Guarantees" and it is recommended you check this option on. In the event that fraud check returns a pending status for the guarantee disposition during the order process having this option enabled will allow the order process instead of halting with a fraud status. When an order receives a Pending Guarantee status it means SimpleFraud has flagged the order for one reason or another so it can be reviewed by a team of experts before setting a final disposition. This does not necessarily mean the client is fraudulent, and in many cases it is not.

    • By activating this feature orders will not be processed as fraud and will complete the checkout process and accept payment from the client if a Pending Guarantee status is returned during the initial fraud check. Typically orders that are flagged for review will receive an update in the status of the guarantee within hours, however it can take up to 24 hours to complete.

    • With that said, you would then have the option(s) to hold the order without deployment of products or services while you wait for the pending guarantee results. Or you could process as normal until a guarantee disposition is made. Should the order be denied for a guarantee you then have the option to not settle the transaction through your payment gateway or refund any payment from WHMCS to the suspected fraudulent client "removing" yourself from the liability of receiving a chargeback later for an order that SimpleFraud wouldn't guarantee.

    • To Activate this feature simply "tick" the check-box next to "Pending Guarantees" under where you added your CompletePlus API key.

      -image here-

  6. Once you have completed configuring your SimpleFraud platform(s) scroll to the bottom of the configurable setting and make sure you save your settings by clicking on the "Save Changes" button.

Activating the SimpleFraud Plus fraud management add-on (required to run SimpleFraud fraud check in WHMCS)

In WHMCS you need to activate SimpleFraud Plus in "Fraud Protection" to process fraud check during the order checkout process, similarly to other fraud prevention services available to WHMCS like MaxMind or Verilogix which are add-ons built into WHMCS.

Please Note: If you do not activate the SimpleFraud Plus fraud management add-on, orders processed in WHMCS will not be checked for fraud!

  1. Navigate to WHMCS Setup -> Fraud Protection then select SimpleFraud Plus from the drop-down that will be available.

    • If you are using the built in "Documentation" as listed above, you can simply click on the "+ Activate" buttons like -image here- located in the "Activating the SimpleFraud Plus fraud management add-on" section of the documentation and go directly to the Fraud Protection page with SimpleFraud pre-selected from the available fraud protection add-ons.

  2. Tick the check-box next to "Enable"

    -image here-

  3. Next click on the "Save Changes" button on the page to save your settings.

    Please Note: WHMCS only allows for one active fraud prevention module to be activated. If you were previously using another fraud protection service prior to SimpleFraud, please double check to make sure that add-on is deactivated just in case it wasn't activated when you activated the SimpleFraud Plus add-on.

Activating the administrative SimpleFraud overview widget

The SimpleFraud administrative overview widget a.k.a. "SimpleFraud Suite Overview" is an administrative widget for WHMCS that provides a heads up display on your WHMCS "Admin Summary" page. Generally the first page you see when you log into your WHMCS administration area.

Using the overview widget you have quick access to the SimpleFraud case console and configurable settings. You also have order/case stats, available credit balance and balance warning threshold, plus important notifications and alerts are also displayed.

  1. First if you aren't already logged into your WHMCS installation as an administrator, do so now. Then navigate to WHMCS Setup -> Addon Modues (the same place you were to activate SimpleFraud) scroll down the list of available add-ons until you see SimpleFraud and to the right select the "Configure" button.

    • If you are using the built in "Documentation" as listed above, you can simply click on any of the "Configure" buttons like -image here- located in various sections of the documentation and go directly to the SimpleFraud add-on module configurations.

  2. Next scroll down to the bottom of the configurable options for SimpleFraud and in the "Administrative Settings" section you will see a check-box followed by text reading: "Tick to enable SimpleFraud Overview admin widget"

  3. Tick the check-box now to activate the widget.

    -image here-

  4. Remember to click on the "Save Changes" button to save your settings.

  5. Now when you visit your "Admin Summary" page you will see the active SimpleFraud overview widget!

    -image here-

Additional configurable options and management features

With SimpleFraud you get more than just your basic fraud check service. In the "Configurable Options" settings we have included several advanced features that can aid in order security and productivity. These features are not platform specific and can be used on both Advanced ScorePlus and the Guaranteed CompletePlus platforms.

The first option you'll notice is the "Zero Credit Balance Action" - if your SimpleFraud credit balance reaches zero this option will allow you to automatically disable fraud check until you add funds to your credit balance. What that means is when your SimpleFraud account credit balance reaches zero, SimpleFraud will stop checking orders for fraud, however it will not stop the order process. All orders will be processed while you have a zero credit balance and this option enabled. We do not recommend using this setting, see following note!

  • Please Note: by default if your credit balance reaches zero - your account will be flagged "BUT" will continue to process and check orders for fraud for 24 hours. After 24 hours your account will automatically be disabled and any guarantees on orders you may have received in that 24 hour period will be cancelled. (The action of cancelling a guarantee cannot be reversed, no matter how or why it was cancelled)

The next option you'll notice is "Cancel Unpaid Orders". This option is an automated means to cleaning up NON-Fraudulent abandoned/unpaid orders, especially useful if the order received an automatic "Guarantee" from SimpleFraud. We highly recommend the use of this feature!

  • This option works with your WHMCS daily cron run and requires you to have cron configured properly for WHMCS.

  • When activated any orders checked for fraud and has either received a Guarantee or is considered non-fraudulent (or good) based on your SimpleFraud configured settings AND ALSO did not receive a payment because the client abandoned the payment process (for any number of reasons, like insufficient funds with there credit card or bank account) will be automatically cancelled and any guarantee those orders may have received will also be cancelled, this way you are not charged any guarantee fees for a sale you did not actually make!

  • You have the option to set this from 1 to 30 days, the default setting is 7 days (somewhere between 3 and 10 days would be recommended.) In the event you use a third party application or add-on to do order follow up on abandoned sales you may not want to use this setting or set it outside the scope of your follow-up application!

  1. First if you aren't already logged into your WHMCS installation as an administrator, do so now. Then navigate to WHMCS Setup -> Addon Modues (the same place you were to activate SimpleFraud) scroll down the list of available add-ons until you see SimpleFraud and to the right select the "Configure" button.

    • If you are using the built in "Documentation" as listed above, you can simply click on any of the "Configure" buttons like -image here- located in various sections of the documentation and go directly to the SimpleFraud add-on module configurations.

  2. To Activate the Zero Credit Balance option scroll down towards the bottom of the SimpleFraud configuration settings until you see "Configurable Options" in the left side of the configuration table

    • Tick the check-box to activate the Zero Credit Balance option

      -image here-

  3. To Activate the "Cancel Unpaid Orders" option tick the corresponding check-box to the right

    • Under the Cancel Unpaid Orders check-box there will be an input filed labeled with "Days until Cancel"

    • Enter the number of days you want to hold the unpaid orders before they are automatically cancelled. You can enter a value of 1 to 30 days. During this time the potential client can return and complete the payment process.

      -image here-

    • Please Note: Any order that receives a guarantee against chargeback means you are liable for the platform fee, after 30 days this fee is non refundable unless a support ticket is opened and there is sufficient reason to do so.

  4. Remember to click on the "Save Changes" button to save your settings.

    Additional options available in next SimpleFraud update:

  • "Close Fraud Accounts" to close accounts created during a fraudulent order to better secure your order process and system form unwanted access.

  • "Block User IP" to block a user's IP and keep them from accessing your site when they repeatedly try to make a fraudulent purchase.

  • "Ban Malicious User" to set the number of times a user can attempt to place an order (that wasn't flagged as fraud) before they are banned from your site. (Min: 2, Max: 7, Default: 3)



Have more questions? Submit a Ticket