# FraudLabs Pro

https://docs.wisecp.com/fr/fraudlabs-pro

Configure FraudLabs Pro to screen website checkout attempts and stop orders that match your chosen risk rules.

## Accessing the Screen

Open **Settings → Fraud Protection → All Modules** and click **Configure** on the FraudLabs Pro card. Address: `{admin}/module/fraud?module=FraudLabsPro`.

## Screen Overview

- **Configuration**: Activation, API credentials and order blocking rules.
- **Records**: Recorded refusals for this module, with customer, reason, IP address and date.

### Preparing Your Account

Prepare a FraudLabs Pro account with an API key, available screening credits and a plan covering your chosen checks. See the [official Screen Order documentation](https://www.fraudlabspro.com/developer/api/screen-order). No server record, product mapping or separate module license field is required here.

### Understanding Order Checks

The website checkout sends available customer identity, IP, billing address, telephone, order total, currency and coupon information. It does not send card numbers or a device fingerprint. A setting cannot supply information absent from the provider response.

Active fraud modules check the attempt before the order is created. The first refusal stops checkout. These checks do not review earlier orders or automatically cancel paid services. This integration provides no catalog import, periodic synchronization or provider feedback action.

## Configuration Fields

- **Status**: Initially disabled. Select Enable to edit the settings and include this module in checkout checks.
- **API Key**: Required when enabling the module. Use the key from your FraudLabs Pro account.
- **Risk Score Threshold**: Default 80; accepts whole numbers from 0 to 100. Scores equal to or above the threshold block checkout. Zero disables only this check.
- **Provider Verdict**: Default Block REJECT only. Alternatively choose Block REJECT and REVIEW or Ignore the verdict. Score and other rules still apply independently.
- **Reject Free Email Services**: Off by default. Rejects addresses the provider identifies as free email services.
- **Reject Disposable Email Addresses**: Off by default. Requires the provider to return a positive disposable-address result.
- **Reject Unresolvable Email Domains**: Off by default. Blocks when the provider reports that the email domain does not exist.
- **Reject Anonymous Connections**: Off by default. Blocks a positive proxy result from FraudLabs Pro.
- **Reject Country Mismatch**: Off by default. Requires a billing country and a confirmed mismatch with the IP country.
- **Reject Blacklisted Records**: Off by default. Blocks a returned blacklist match for IP, email, telephone, username, card, device or shipping address.
- **Block When the Service Is Unreachable**: Off by default. Enable to refuse attempts when a provider request returns no usable verdict. Missing API credentials still skip this module's check.

## Tasks

### Saving the Rules

1. In **Configuration → Status**, select **Enable**; the remaining fields become editable.
2. Enter **API Key**, set the threshold and choose the blocking rules.
3. Click **Save Changes** below the form. Reopen the module and check the saved settings.

Saving validates the required key and threshold, without contacting the provider. There is no connection-test or sandbox selector. A controlled checkout test makes a real screening request and can consume credits; agree its scope before testing.

### Reviewing a Refusal

1. Open the module's **Records** tab and search for the relevant customer, IP address or reason.
2. Compare the date and reason with the customer's checkout message and the FraudLabs Pro account result.
3. Review the rule responsible before changing settings. A refusal is a risk signal, not proof of misconduct.

## Important Notes

> **Availability and Coverage**
> 
> With error blocking off, provider failures allow checkout to continue to other checks. REVIEW blocking refuses the attempt; it does not create a pending-review order. Client API and administrator-created orders do not share this website checkout check.

> **Record Cleanup**
> 
> The Records tab's Clear Logs action currently leaves detection records in place. A success message does not confirm deletion. Successful screening attempts are not listed as detection records.

## Required Permissions

Requires **SETTINGS_FRAUD_PROTECTION** to open and configure the module.

## Related Articles

- [Fraud](https://docs.wisecp.com/en/fraud-modules)
- [MaxMind](https://docs.wisecp.com/en/maxmind)
- [WFraud](https://docs.wisecp.com/en/wfraud)
- [Orders](https://docs.wisecp.com/en/orders)
