[ad_1]
Hi @coconutcoder
hundreds of orders placed automatically
hundreds of payments failed overnight
The customers did not place those orders, they were somehow placed automatically
From what you say it seems that bots targeted the checkout page, and that is why there are so many failed order notifications.
Our recommendation is to install a captcha service on the checkout and login page. Something like reCaptcha for WooCommerce is a good option. This Recaptcha service protects your store from automated attacks and spam bots.
Let us know if you still face issues after adding a reCaptcha check on your site.
After further research, it looks like we were the target of a “card testing” scam or fraud, where someone tried making purchases of a $10 item using what are probably stolen credit cards, but real names and addresses and phone numbers were somehow used, because our users table has about 500 new accounts. Those people don’t even know it was done to them.
I w2ill be going through the recommendations, including CAPCHA on checkout.
Thank you Margaret! I think you are right.
