What to do about questionable orders?

[k2zs]

I had an order show up today that seems like it may be fraudulent to me. The user ordered hosting only and the domain name they registered it for looks suspicious: fvckc0d3r.co.cc .

I did a whois on the domain and it's a new domain with 3 records since 6/16/2012. The currently registered IP resolves to the Ukraine, the user provided a New Jersey mailing address, but the GeoIP on the users IP resolves to Ohio with a server name of xl.webmarketinghost[dot]com.

Should I cancel the order through WHMCS? I use the simple PayPal billing, will that refund their money without any charges to me?

P.S. - Is there any chance they used this method to hack my site or gain access to my PayPal account?

Thanks
Scott

[bear]

The currently registered IP resolves to the Ukraine, the user provided a New Jersey mailing address, but the GeoIP on the users IP resolves to Ohio with a server name of xl.webmarketinghost[dot]com.

That is without doubt something I'd cancel.

Should I cancel the order through WHMCS? I use the simple PayPal billing, will that refund their money without any charges to me?

Mark it as fraud and cancel. Paypal will refund, but you may need to do so manually depending on what account type you have.

P.S. - Is there any chance they used this method to hack my site or gain access to my PayPal account?

While there's always that chance, it's slim IMHO.

[mylove4life]

I'm sure thats a bad one... I would kill it fast before he uploads crap to the server...

[k2zs]

That is without doubt something I'd cancel.

Mark it as fraud and cancel. Paypal will refund, but you may need to do so manually depending on what account type you have.

While there's always that chance, it's slim IMHO.

Thanks bear,

Followed your instructions and it all worked. Paypal refunded their money but there was a .30 fee.

Sorry to hear that, you will be missed

@Milliam364, not quite sure what you meant by that but since you only have 3 posts can only assume it's spam...

[[JSH]John]

Paypal refunded their money but there was a .30 fee.

Are you sure you clicked the refund button and didn't manually send the payment back to them? When you refund a payment there are no fee's.

[easyhosting]

I had an order show up today that seems like it may be fraudulent to me. The user ordered hosting only and the domain name they registered it for looks suspicious: fvckc0d3r.co.cc .

I did a whois on the domain and it's a new domain with 3 records since 6/16/2012. The currently registered IP resolves to the Ukraine, the user provided a New Jersey mailing address, but the GeoIP on the users IP resolves to Ohio with a server name of xl.webmarketinghost[dot]com.

Should I cancel the order through WHMCS? I use the simple PayPal billing, will that refund their money without any charges to me?

P.S. - Is there any chance they used this method to hack my site or gain access to my PayPal account?

Thanks
Scott

100% fraud in my book.

i suggest you sign up with something like Maxmind and set up fraud protection on your WHMCS, so the system will pick up orders like this and not process them.

[KOhosting]

Wow, I just denied an order for the same domain due to fraud concerns. The individual registering claimed to be in Jersey, but everything resolved to overseas. Passed PayPal, but was not confirmed.

[BobC]

Are you sure you clicked the refund button and didn't manually send the payment back to them? When you refund a payment there are no fee's.

k2zs may have been refunded the fee Paypal assessed him originally.