Maxmind Minfraud API Wrapper

There are several indicators of possible fraud that are readily accessible:

• User location (via geolocation) - distance between user location and billing location indicates possible fraud. In addition, several countries are considered high-risk for online payments.
• Email address - free Email service address (such as Gmail, Hotmail and so forth) are much more likely to be used in fraud than private domain names.
• Usage of a proxy - proxies are used to camouflage the indicators in the previous point, by attempting to disguise the real location of the user. It is not always easy to detect proxies, but Maxmind has a large database of known proxies and high-risk proxies to match against.
• Credit-card security checks - such as AVS and CVC. Failure of those checks is a high risk of fraud.

For more in depth information, you should definitely read 8 steps to preventing online fraud (I am the author of that article).

Using the information gathered and by comparing to historical fraud data, Maxmind calculates a Risk Score that indicates the chance of fraud (from 0.01 to 100).

API Key

In order to use the service, you must obtain an API key from Maxmind.

• You can apply for a free trial key that provides 1,000 API calls
• Or apply for the paid service

Usage

Include the class, and call one of the testing methods, according to your needs.

include_once('Minfraud.php');
$minfraud = new Lionite_Minfraud();
$result = $minfraud - check($data);

Where $data includes the information you collect from your credit-card form or Paypal.

This class integrates with the PHP Paypal API class, and provides two methods for it.

For Express Checkout (transactions and recurring profiles):

include_once('Minfraud.php');
$minfraud = new Lionite_Minfraud();
$result = $minfraud - checkExpressCheckout($data);

Where $data is the information returned from getCheckoutDetails()

For Direct Payment:

include_once('../library/Lionite/Minfraud.php');
$minfraud = new Lionite_Minfraud();
$result = $minfraud - checkDirectPayment($data);

Where $data is the information submitted by the example form included in the component. You can add / modify some of the parameters if you have somewhat different field names.

SSL Certificate

The component includes the Mozilla SSL certificate used to authenticate the endpoint (Maxmind's service in this case). You can always obtain the latest version at the official cURL site.

The certificate is located inside the /Cert folder in the library folder. If you put the certificate in a different location, you need to adjust the $_SSLcertificate variable inside the class.