less than a minute read • Updated 8 minutes ago
Fraud prevention overview
An overview of the fraud prevention tools available for your Foxy store, including gateway fraud filters, minFraud risk screening, reCAPTCHA, FraudLabs Pro, and the pre-checkout webhook
Foxy provides several tools to help protect your store from fraudulent transactions, from built-in abuse prevention to configurable integrations like minFraud and Google reCAPTCHA. Fraud protections are configured per payment method set, under Settings > Payments in the Foxy admin.
Start with your payment gateway
Your first line of defense should be your payment gateway. Most gateways offer anti-fraud tools (sometimes at an additional cost), and we strongly recommend enabling any fraud controls your gateway provides. The tools below work alongside your gateway's fraud filters, not as a replacement for them.
Foxy's built-in abuse prevention
Foxy has internal systems in place that automatically block more obvious fraud and abuse before it ever reaches your gateway. There's nothing to configure here — it's always on for every store.
minFraud risk screening
Foxy integrates with MaxMind's minFraud service, which analyzes the available customer and transaction data and assigns each transaction a risk score. You set a score threshold, and any transaction scoring above it is automatically declined. See Set up minFraud fraud screening.
Google reCAPTCHA on the checkout
Foxy's reCAPTCHA integration helps prevent bots from pushing through automated transactions, such as card testing attacks. reCAPTCHA verifies that a human is behind the request, though it can't tell whether that human is an honest person or a fraudster. See Configure reCAPTCHA on the checkout.
If your store uses a custom subdomain, you should also set up your own reCAPTCHA keys.
FraudLabs Pro
FraudLabs Pro offers an anti-fraud integration for Foxy that screens orders for fraud patterns using their detection service, with a free plan for smaller stores. See Set up FraudLabs Pro fraud screening.
Custom fraud screening with the pre-checkout webhook
For custom anti-fraud integrations, you can use the pre-checkout webhook (also known as the pre-payment webhook) to run your own checks before a payment is processed. The FraudLabs Pro integration above uses this approach, and some Foxy users have built custom integrations with services like Signifyd the same way.
Notes
There's no single tool that eliminates all fraud while allowing every legitimate order through. Combining your gateway's fraud filters with the tools above gets you as close as possible.