Premium Features
A Business or Enterprise license unlocks four additional fraud rules and the AI-powered explanation engine. All premium features degrade gracefully — if the license is inactive, the plugin silently falls back to the seven Lite rules.
Behavioral biometrics
WooFraudGuard injects a lightweight JavaScript collector into every checkout page. It records how the customer interacted with the form without capturing any keystrokes or personal data:
- Time from page load to order submission
- Whether fields were typed or pasted
- Copy events (copy-pasting from a card or notes app)
- Tab-switch count (switching away mid-checkout)
- Mouse movement entropy
- Autofill detection
A human filling in a checkout form produces a recognisable pattern. Bots and scripts produce outliers — too fast, no mouse movement, all fields pasted in one event. The Behavioral heuristics rule scores these signals and contributes up to 60 points to the final risk score.
Enable it under WooFraudGuard → Settings → Privacy & API keys → Enable behavioral data collection.
Fast-checkout bot detection
The Fast checkout rule flags any order submitted faster than a configurable minimum time (default: 5 seconds from page load). Configure the minimum under Settings → Checkout Protection.
MaxMind minFraud
WooFraudGuard can send each order to MaxMind’s minFraud API and incorporate their risk score alongside the built-in rules.
- Create a MaxMind account and generate a licence key from their portal.
- In WooFraudGuard → Settings → Privacy & API keys, enter your MaxMind User ID and licence key.
- The MaxMind rule weight controls how heavily their score influences the final result.
MaxMind requests are made server-side and are not visible to the customer.
Chargeback feedback loop
When a Stripe or PayPal dispute comes in, WooFraudGuard receives the webhook, identifies the original order, and:
- Adds the order’s email, IP, device fingerprint, and card BIN to the blocklist.
- Walks the order graph to find any pending orders that share those atoms and re-scores them — so a related fraudulent order already in the queue gets caught before fulfilment.
- Logs the chargeback event to the wfg_chargebacks table for reporting.
Configure your payment gateway webhook secrets under Settings → Privacy & API keys:
- Stripe — paste the endpoint signing secret from your Stripe dashboard. The WooFraudGuard webhook URL to register in Stripe is shown on the same settings screen.
- PayPal — enter your PayPal Client ID, Client Secret, and Webhook ID.
AI-generated order explanations
The Score detail modal (WooFraudGuard → Flagged Orders → View detail) includes an Explanation section. After adding an OpenAI or Groq API key in Settings, the Generate button produces a short plain-language narrative explaining why the order was flagged and what specific signals drove the score.
Explanations are generated on demand (not automatically for every order) to keep API costs low.