Yesterday one of my sites had 15 attempts at unauthorized charges - all PayPal Direct within an hour. All using the name "John Smith", some for as little as $63 and some for as much as $8,650.

We are using ReCaptcha on card entry, gift certificate, and email orders.

What else can be done?

John Smith is google checking your product ads to be sure the shipping charges are what is showing in your ads.
I have had him rack up over 100 of these in a day. He is a busy guy.
Sometimes for fun, I block his IP, but he is crafty and he will just use another.
Unless you want to kill your product ads, it's probably best to let him be.

David

Good to know!

Thanks for the quick reply.

REALLY! I have one customer who has been slammed by John Smith. My client was getting really pissed. And yes, he switches IP's faster than I can block them. So I set up a block in the cart checkout that if the phone number was the one he always provides, to redirect him off the site. Required a mod to the inccart.php script.

Marshall
CENLYT Productions - ms designs
Affordable Web Design
Custom Ecommerce Designs
Responsive Websites
Cenlyt.com

Hi Marshall, checking the IP will reveal they are really google.
Further, the addresses used are all google facilities all over the country.

I expect if Mr. Smith becomes butthurt, he might kill your ads... LOL

In any case, they want to confirm your shipping rates is all. I noticed the products they use are always products from my feed as well.
At least they are not clicking the ads..

David