The IP Blocking feature allows you to block individual IP addresses or a range of addresses. Merchants can access the IP Blocking feature from the individual order review page or from the IP Blocking page within Risk Tools. From the IP Blocking page, merchants can look up information for suspect orders and IP addresses using reverse DNS lookup.
Merchants then use the information to decide whether to add the IP address to the IP Block list. Block settings should be applied within several minutes of an IP address being added to or removed from a block list. In rare circumstances, it may be several hours before new block list settings take effect.
Merchants should exercise caution when deciding whether to add an IP address or especially a range of IP addresses to the IP Block List. While blocking a range can save time when you wish to block a network associated with a high-risk country or organization, you should be cautious about adding ranges as there is a greater potential for blocking legitimate buyers if you make a mistake.
- IP Blocking should be used as a tool to help minimize carding; the scripting of orders through a merchant store typically to validate credit card information.
- IP addresses can be spoofed whereby fraudsters go through an anonymous proxy or falsify their IP address so blocking an IP may not block that particular fraudster.
- IP addresses can be assigned dynamically so blocking a fraudulent order from one person may in turn block other possibly legitimate orders in the future for buyers assigned that particular IP address. Learn more.
Merchants must use their judgment and business experience in using IP Blocking to balance the risks of fraudulent orders (cost of goods, cost of chargebacks, other fees) against the risk of potentially lost legitimate orders.
In addition to the problem caused by dynamic IP addresses, merchants should also exercise caution in blocking IP addresses for the following reasons:
- Certain networks such as company networks, may group outbound requests into only a few IP addresses. If you block an IP address based on an order from one possible fraudster on such a network, you may block legitimate buyers on the same network.
- Orders may originate from shared computers such as those found in libraries or Internet cafes. If you block an IP address based on a potentially fraudulent order placed by a fraudster, you would then be blocking any potential future orders from legitimate buyers using computers with the same IP address.
Legitimate buyers who may inadvertently be blocked may contact you to place orders or inquire as to the problem with checkout. You can choose to remove an IP address from the IP Block List if you believe the orders originating from the IP address are legitimate.
Note: Turbify provides the IP address blocking feature as is and without warranty of any kind to Merchant Solutions and Store v.1 merchants to be used at the merchants' discretion. Merchants should carefully review the Reverse DNS Lookup information provided before blocking any IP address, as IP addresses may be dynamically assigned to users by certain Internet Service Providers possibly blocking legitimate buyers and not ensuring the fraudster is blocked from ordering. Also, as IP addresses may be falsified, merchants are advised to use AVS and CVV responses to determine which orders to approve, reject, or follow up with the issuing bank.
See Also:
