Stop fake orders right at checkout

The Blocking page shows who’s blocked, how many attempts were stopped, and what they were blocked by.

1. 1
   Add a block · Settings Add a block by hand (section 3) and change the rules (from section 4).
2. 2
   Blocked now How many blocks are active right now.
3. 3
   Lifted or expired How many were lifted or have expired.
4. 4
   Attempts stopped How many order attempts were stopped while blocked — each one is a courier charge saved.
5. 5
   Phone numbers How many phone numbers are blocked.
6. 6
   Devices & browsers How many devices or browsers.
7. 7
   IP addresses How many IPs.
8. 8
   Status Blocked now, Lifted or expired, All.
9. 9
   Type and search Filter by Phone, IP, Browser or Device, or search by value, name, phone or note.

What’s blocked, why, whose, how many attempts, and for how long.

1. 1
   Type and value Browser, IP address, Phone or Device — and its value.
2. 2
   Reason e.g. “Auto — ad clicks, never ordered” (clicked ads repeatedly, never bought), which comes from Visitors.
3. 3
   Who Which visitor or customer, name and phone.
4. 4
   Attempts How many times they tried to order after being blocked.
5. 5
   Permanent Stays until you lift it.
6. 6
   Time limit e.g. “lifts in 4 hours” — lifts itself after this much time.
7. 7
   Order link Which order the block came from — e.g. Re-order cool-down: after placing one order, they can’t order again for a while.
8. 8
   Phone hunting Trying number after number to get around a block — “tried more than 3 different phone numbers”.
9. 9
   Unblock · Delete Lift it if it was a mistake, or delete it completely.

Most blocks happen from an order in Order Desk, where the phone, IP, browser and device are already known. If you have a number or IP in hand, do it from here.

1. 1
   When When you have the value in front of you — e.g. someone threatened you on the phone, or another shop owner shared a number.
2. 2
   What to block Phone, IP address, Browser or Device.
3. 3
   Value The number, IP or token.
4. 4
   For how long How many minutes — 0 means forever.
5. 5
   Note Why you blocked it — so anyone on the team understands later.
6. 6
   Block · Cancel Save or cancel.

eSP Theme → Blocking has six tabs. The first holds the main switch.

1. 1
   Six tabs Blocking, Auto-block, Customer tags, Fraud check, Fraud rules, Devices.
2. 2
   Block fraudulent customers When on, blocked phones, IPs or devices can’t check out. When off, the list is kept but doesn’t stop anyone.
3. 3
   Where the visitor’s address comes from If your host’s CDN (Hostinger, LiteSpeed…) sits in front, everyone can appear with the same IP — then blocking one person blocks everyone. Set it correctly here.
4. 4
   This request Which IP the server sees right now — check that it’s correct. Blocking, fraud check and server events all depend on the real IP.

Blocked fraudsters try again with new numbers. This counts how many different numbers come from the same device and blocks automatically. Works on every checkout form.

1. 1
   Turn it on Blocking must be on.
2. 2
   How many different numbers e.g. 3 — leaves room for a typo or a second number; the 4th one gets blocked.
3. 3
   Within how many minutes Attempts within this window are counted together, then it resets to zero.
4. 4
   How long to block e.g. 1440 = one day; 0 means until you lift it.
5. 5
   What it blocks by Auto-block only sits on the browser — it stops exactly that person. Someone else with the same phone model or on the same mobile network isn’t blocked by mistake.

As soon as an order comes in, it looks up previous orders by phone number and tags it — New, Duplicated, Bad, On Way, Repeated. You decide which statuses count toward which tag. Tags show on every order in Order Desk.

1. 1
   Tag customers by their record Tagging on/off.
2. 2
   “Duplicated” statuses If the customer has an order in one of these statuses, they’re Duplicated — meaning an order is already in progress.
3. 3
   Block “Duplicated” Won’t take a new order while one is in progress.
4. 4
   “Bad” statuses e.g. Cancelled, Refunded, Failed, Returned, Fake — if any of these happened before, they’re Bad.

You choose which tags can’t place orders.

1. 1
   Block “Bad” Won’t take the order if a previous order is in a Bad status.
2. 2
   “On Way” statuses e.g. Shipped — a parcel is on the way right now.
3. 3
   Block “On Way” Won’t take a new order before the previous one arrives.
4. 4
   “Repeated” statuses e.g. Completed, Delivered — they’ve bought before.

The last three settings.

1. 1
   Block “Repeated” Usually not needed — it turns away your best customers.
2. 2
   Tell the customer why Off (safer): a blocked customer sees a general message, and sees the real reason only after verifying their number with an SMS code. On: the reason shows as soon as the number is typed — which could let a stranger learn that an order is in progress on that number.
3. 3
   Auto discount for Repeated customers When a returning customer orders, a discount is taken off automatically and shown as a separate line on the order.

Know before you send a rider — how many deliveries and returns this customer has across the country’s couriers. Shows on the Delivery Analysis card of every order in Order Desk.

1. 1
   What it does Records from all couriers.
2. 2
   Check customers When on, a shield icon appears next to the phone number. Answers are kept for 6 hours, so you pay only once per customer.
3. 3
   ProviderBD Courier or FraudChecker — each keeps its own key, so switching doesn’t mean retyping.
4. 4
   API key Saved encrypted, never shown again, and not included in settings exports.
5. 5
   Check it works Test it after saving.

The courier record decides at checkout automatically: good customers order without OTP, risky customers enter an SMS code, and if the cancel rate is over the limit, the order isn’t accepted at all.

1. 1
   Judge customers by their courier record Fraud check must be set up. One credit per new number, answers kept for 6 hours, and there’s a limit on new lookups per hour.
2. 2
   Judge only after (parcels) Only judge once the courier has at least this many parcels — one returned parcel isn’t a fraud record.
3. 3
   No record — OTP A number the couriers have never seen must enter an SMS code — catches made-up numbers, but costs one SMS for every genuinely new customer. If the lookup fails, the customer goes through normally.
4. 4
   Good record — no OTP With a success rate of e.g. 80% or more, no OTP is needed — Survival Mode and screen-size OTP rules step aside for them too. Loyal good customers order in one tap.
5. 5
   Risky record — OTP With a cancel rate of e.g. 30% or more, an SMS code is required.
6. 6
   Bad record — no order If the cancel rate is higher still, the order isn’t accepted — your message shows under the phone number. Keep this limit well above the OTP limit.

Strict rules for when a wave of fraud hits — OTP on every order, OTP on computers, OTP on very small screens, or no orders from computers at all.

1. 1
   What you can do Decide who can order from which screens.
2. 2
   Survival Mode When on, every order needs an SMS OTP — no exceptions. Use it during a fraud wave. Without SMS, this rule steps aside and orders go through normally.
3. 3
   OTP on large screens OTP for orders from desktops, laptops and tablets — caught even if the screen size is faked.
4. 4
   OTP on small screens Screens narrower than a set width — catches cheap fraud-farm handsets and shrunk emulators.
5. 5
   OTP SMS text The text of the code SMS; {code} is replaced with the 6-digit code.
6. 6
   Phone field off on large screens The phone field is locked on computers and the server rejects the order too — it can’t be bypassed. Use this if you only want orders from mobiles. You can also show a full “mobile only” page on large screens.