Skip to content
Search Articles/

less than a minute read • Updated 8 minutes ago

Configure reCAPTCHA on the checkout

How to enable Google reCAPTCHA on the Foxy checkout to block bots from pushing through automated fraudulent transactions.

Foxy's Google reCAPTCHA integration helps prevent bots from aggressively scripting and pushing transactions through your checkout in an automated way, such as card testing attacks. Note that reCAPTCHA verifies that a human is behind the request — it has no opinion on whether that human is honest or a fraudster.

How to set it up

  1. 1

    Go to the Foxy admin

  2. 2

    Go to Settings > Payments

  3. 3

    Click on the payment method set you want to protect

  4. 4

    Under Fraud protections, click Add fraud protection + and select Google reCAPTCHA (or click the existing Google reCAPTCHA entry to edit it)

  5. 5

    Choose your Configuration setting

  6. 6

    Close the panel to save your changes

Configuration options

There are three options:

  1. 1

    Disabled: Turns off reCAPTCHA for your store.

  2. 2

    Always enabled: Includes reCAPTCHA on every checkout.

  3. 3

    Enabled by errors: Requires reCAPTCHA only in specific situations where our systems have cause to believe your store needs extra protection. We don't reveal the specific behavior, but broadly: if we detect behavior suggesting a bot or botnet is pushing transactions through without a real human behind it, we'll enable reCAPTCHA for specific IPs or for all checkout attempts. It's tuned so a legitimate customer would very rarely see it, while effectively making bot-based bulk fraud impossible.

We recommend Enabled by errors for most stores.

Notes

  • reCAPTCHA isn't required for API-based or Unified Order Entry (UOE) transactions.

  • Fraud protections are configured per payment method set. If your store uses multiple payment method sets, add reCAPTCHA to each one you want to protect.

  • If your store uses a custom subdomain, we strongly recommend setting up your own reCAPTCHA keys. The Site Key and Secret Key fields for this are in the same Google reCAPTCHA panel.

Need Help?

Did this article answer your questions? Need help with anything? Please click below to contact us.