Skip to content
DemoThis is a demo with test data. Nothing is real money.Test credentials

Attacks, risk scores and ACH returns

How to try it

This page reads the demo store’s ChargeWarden data. Everything on it is sample data, created with the plugin’s own sample data tool and attack simulator, which fires hundreds of failed checkouts at both the classic checkout and the Store API.

  1. Read the two sample attacks and how each one was stopped.
  2. Look at the scored orders: every point has a reason.
  3. Download the sample ACH report, then open the same data in the read-only admin.

Card-testing attempts blocked (sample, last 14 days)

59 checkout attempts blocked. Two sample attacks are included: a Store API attack from one network (stopped by the per-network limit and automatic attack mode) and a classic checkout attack rotating IP addresses from one browser (stopped by the per-browser limit).

DayBlocked attemptsFailed payments counted
Oct 1301
Oct 1401
Oct 1501
Oct 194614
Oct 2201
Oct 2301
Oct 24136
Oct 2504

Order risk scores with their reasons (sample orders)

Every score lists the rule and the points behind it. Nothing comes from a paid fraud service: the rules use the order, the checkout history, free public IP lists and the risk data the payment gateway already saved.

Sample order #408 scored 100 (hold): Waiting for review

  • +10 Billing country US, shipping country NG.
  • +15 Shopper connected from RO; billing country is US.
  • +20 Email domain mailinator.com is on the disposable email list.
  • +15 First order from this customer, total 3,600.00 USD is at or above 500.00 USD.
  • +25 4 different cards were tried from this shopper in the last 24 hours.
  • +10 4 failed payment attempts from this shopper in the last 24 hours.
  • +30 The IP address is on the Tor Project exit node list.
  • +10 The store was in attack mode when this order was placed.

Sample order #410 scored 65 (hold): Waiting for review

  • +15 Shopper connected from DE; billing country is CA.
  • +20 Email domain guerrillamail.com is on the disposable email list.
  • +15 First order from this customer, total 2,400.00 USD is at or above 500.00 USD.
  • +15 The IP address is in a published DigitalOcean network range, not a home or mobile network.

Sample order #411 scored 45 (review): Waiting for review

  • +10 Billing country US, shipping country GB.
  • +15 First order from this customer, total 4,800.00 USD is at or above 500.00 USD.
  • +20 Stripe Radar (sample) rated this payment elevated risk (score 68).

Sample order #412 scored 20 (low): No review needed

  • +15 First order from this customer, total 1,200.00 USD is at or above 500.00 USD.
  • +5 The request carried proxy headers: Via.

Sample order #409 scored 15 (low): No review needed

  • +15 First order from this customer, total 1,200.00 USD is at or above 500.00 USD.

ACH return rates for BankBridge payments (sample ledger)

Rolling 60 days, against the Nacha return rate levels. 214 sample debit entries in the window.

FamilyReturnsRateNacha levelStatus
Unauthorized (R05, R07, R10, R11, R29, R51)10.47%0.5%Close to the level
Administrative (R02, R03, R04)20.94%3.0%Below alert level
Overall (all codes)83.74%15.0%Below alert level

Monthly evidence report for the bank (sample, not for real use): PDF · CSV. It supports the merchant’s own risk-based process; it is not a certification.

Payment page scripts

3 authorized, 94 waiting for authorization, 1 changed since they were authorized. Inventory evidence: CSV. A helper for PCI DSS 6.4.3 and 11.6.1; it does not make a store compliant.

See the admin screens

Open the read-only admin: Dashboard · Review queue · Blocks and allowlist · Activity log · ACH monitoring · Payment page scripts.

More to try