Troubleshoot Fraud and Card Testing
Fraudulent activity such as card testing is an unavoidable part of online commerce. This behavior isn't specific to Leaky Paywall or your site.
Card testing can happen on any site with a payment gateway.
Card testing can happen on any site with a payment gateway.
Card testing is a type of fraudulent activity where someone tries to determine whether stolen card information is valid so that they can use it to make purchases. A fraudster may do this by purchasing stolen credit card information, and then attempting to validate or make purchases with those cards to determine which cards are still valid.
Recommendations
- set up a captcha or Turnstile on your registration form
- regenerate your Stripe API keys
- add the Stripe Signing Secret for your Leaky Paywall webhook
- use a tool like WordFence for rate limiting
Here is more information from Stripe about card testing and methods to prevent it.