Fraud & Risk

Protect your payments with built-in risk scoring and blocklist management.

Risk Scorer

use Frolax\Payment\Services\RiskScorer;

$scorer = app(RiskScorer::class);

$assessment = $scorer->assess($payment);
// Returns RiskAssessment with score, decision, and factors

The scorer evaluates:

Factor	Description
Blocklist	Checks email, IP, card fingerprint against blocklist
Velocity	Detects unusual transaction frequency
Amount	Flags amounts exceeding configurable thresholds

Blocklist

use Frolax\Payment\Models\BlocklistEntry;

// Block an email
BlocklistEntry::create([
    'type' => 'email',
    'value' => 'fraudster@example.com',
    'reason' => 'Confirmed fraud',
]);

// Check if blocked
BlocklistEntry::isBlocked('email', 'fraudster@example.com'); // true

Blocklist entries support optional expiry dates for temporary blocks.

3D Secure

Gateways can implement SupportsThreeDSecure for additional authentication:

use Frolax\Payment\Contracts\SupportsThreeDSecure;

class StripeDriver implements SupportsThreeDSecure
{
    public function initiate3DS(CanonicalPayload $payload, CredentialsDTO $credentials): GatewayResult { /* ... */ }
    public function verify3DS(string $reference, CredentialsDTO $credentials): GatewayResult { /* ... */ }
}

Configuration

// config/payments.php
'risk' => [
    'high_amount_threshold' => 500,
    'velocity_window_minutes' => 60,
    'velocity_max_transactions' => 10,
],