# MaxMind

https://docs.wisecp.com/de/maxmind

Configure MaxMind minFraud to assess website checkout attempts and reject those exceeding your chosen risk limits.

## Accessing the Screen

Open **Settings → Fraud Protection → All Modules** and click **Configure** on the MaxMind card. Address: `{admin}/module/fraud?module=MaxMind`.

## Screen Overview

- **Configuration**: Account credentials, minFraud service level and rejection rules.
- **Records**: Recorded refusals, including the customer, reason, IP address and date.

### Preparing minFraud Access

Prepare your MaxMind account ID, license key and available minFraud credit. Confirm access to the service you select. See MaxMind's [account and testing guidance](https://support.maxmind.com/knowledge-base/articles/approaches-to-testing-minfraud-maxmind). No server record, hosting plan or product mapping is required.

### Understanding the Scope

The module sends available identity, IP, browser, billing, telephone, order amount, currency and coupon information. It does not send card details or install device fingerprinting. Score evaluates the risk score; the additional email, country and anonymous-network checks require details returned by Insights or Factors.

Only active fraud modules participate in website checkout. The first refusal stops order creation. Earlier orders are not rescored, and paid services are not automatically canceled. This integration has no catalog import, scheduled synchronization or transaction-feedback action.

## Configuration Fields

- **Status**: Select Enable to edit settings and use MaxMind during checkout. A disabled module performs no screening.
- **User ID**: Required when enabling. Enter your numeric MaxMind account ID, not your email address.
- **License Key**: Required when enabling. Use the license key belonging to that account.
- **Service Type**: Choose Score, Insights or Factors. Without a saved selection, Score is used. Check the actual saved selection before enabling.
- **Fraud Risk Score**: Default 20. A score strictly above the threshold blocks checkout; an equal score passes this rule. Use whole numbers: decimal thresholds are truncated. Zero disables this rule.
- **Do Not Validate Address Information**: Off by default. Ignores billing city, country and postal-code lookup warnings. It does not ignore an unresolved IP warning or disable country-mismatch rejection.
- **Reject Free Email Service**: Off by default. Blocks when the response identifies a free email service. Requires the relevant Insights or Factors detail.
- **Reject Country Mismatch**: Off by default. Blocks a confirmed billing-country/IP-country mismatch. Missing details do not count as a mismatch.
- **Reject Anonymous Networks**: Off by default. Requires a positive anonymous-network result from Insights or Factors.
- **Block When the Service Is Unreachable**: Off by default. Refuses checkout when a provider request raises an authentication, input or service error.

## Tasks

### Saving the Configuration

1. In **Configuration → Status**, select **Enable** to unlock the fields.
2. Enter **User ID** and **License Key**. Choose **Service Type**, a whole-number threshold and the rejection rules.
3. Click **Save Changes** below the form. Reopen the module and verify the saved selections.

Saving checks that credentials are present; it does not authenticate with MaxMind. There is no connection-test button. The [MaxMind sandbox](https://dev.maxmind.com/minfraud/sandbox-environment/) requires a separate endpoint and key; this module has no endpoint selector. Do not put a sandbox key into this production-service configuration.

### Checking a Refusal

1. Open **Records** and search for the relevant customer, IP address or reason.
2. Compare the reason and timestamp with the checkout message and MaxMind account result.
3. Check the selected service and rule before adjusting the threshold. Risk scoring does not establish misconduct.

Billing lookup warnings can also refuse an attempt when the affected address field was supplied. Such warnings are not always saved as detection records. An empty list does not prove that every attempt passed.

## Important Notes

> **Costs and Availability**
> 
> A controlled checkout test sends a real minFraud request and can consume credit; define its scope first. With error blocking off, provider errors allow the attempt to continue to other checks. Client API and administrator-created orders do not share this website checkout check.

> **Record Cleanup**
> 
> The Records tab's Clear Logs action currently leaves detection records in place. Its success message is not proof of deletion.

## Required Permissions

Requires **SETTINGS_FRAUD_PROTECTION** to open and configure the module.

## Related Articles

- [Fraud](https://docs.wisecp.com/en/fraud-modules)
- [FraudLabs Pro](https://docs.wisecp.com/en/fraudlabs-pro)
- [WFraud](https://docs.wisecp.com/en/wfraud)
- [Orders](https://docs.wisecp.com/en/orders)