Tips for preventing “carding attacks”?

[ad_1]

I've been having a hard time stopping them recently. All the orders fail and no payments actually go through but it's getting pretty frustrating.

I have Wordfence (which does nothing to help)

I recently started using Cloudflare and it reduced it slightly but I got attacked this evening again. At first it was hundreds of orders.. Tonight was only about 60..

I'm fresh out of ideas. Any suggestions? I do have captcha on the site as well and I can tell whoever is doing this is using a bot to do it.

I've blocked IPs manually in Wordfence but I can't sit around and wait for this to happen every day and night and do not want to play this game of cat and mouse anymore.

Please help!

[ad_2]
2 Comments
  1. In addition to what u/toniyevych mentioned (which I also recommend), you should setup WAF rules in Cloudflare to block unscrupulous country – here’s an example of how to do that: [https://imgur.com/a/2B3sb6X](https://imgur.com/a/2B3sb6X) (don’t worry about the ASN rule).

    I’ve found that card testers also prefer low-product-cost style sites, or products where the price is able to be varied to small amounts. If possible, don’t sell those type of products.

 

This site will teach you how to build a WordPress website for beginners. We will cover everything from installing WordPress to adding pages, posts, and images to your site. You will learn how to customize your site with themes and plugins, as well as how to market your site online.

Buy WordPress Transfer