Initial release.<\/p>"},"ratings":[],"assets_icons":[],"assets_banners":[],"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.0"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3742552,"resolution":"1","location":"assets","locale":"","width":2862,"height":1636},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3742552,"resolution":"2","location":"assets","locale":"","width":2866,"height":1612},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3742552,"resolution":"3","location":"assets","locale":"","width":2876,"height":1626}},"screenshots":{"1":"Fraud dashboard \u2014 every flagged order with its risk score, decision, country route, and one-click Confirm Fraud \/ Not Fraud feedback buttons.","2":"Signal Weight Personalization \u2014 the 17 signal weights adapt automatically when you override false positives, so the system learns your store's patterns.","3":"Settings \u2014 choose your AI provider (OpenAI, Anthropic, Google Gemini, or self-hosted Ollama) and configure each optional layer."}},"plugin_section":[],"plugin_tags":[2353,12891,600,229649,286],"plugin_category":[45,54],"plugin_contributors":[286265],"plugin_business_model":[],"class_list":["post-340867","plugin","type-plugin","status-publish","hentry","plugin_tags-ai","plugin_tags-fraud","plugin_tags-security","plugin_tags-vector-search","plugin_tags-woocommerce","plugin_category-ecommerce","plugin_category-security-and-spam-protection","plugin_contributors-dilrubaummer","plugin_committers-dilrubaummer"],"banners":[],"icons":{"svg":false,"icon":"https:\/\/s.w.org\/plugins\/geopattern-icon\/hifqa-fraud-detector.svg","icon_2x":false,"generated":true},"screenshots":[{"src":"https:\/\/ps.w.org\/hifqa-fraud-detector\/assets\/screenshot-1.png?rev=3742552","caption":"Fraud dashboard \u2014 every flagged order with its risk score, decision, country route, and one-click Confirm Fraud \/ Not Fraud feedback buttons."},{"src":"https:\/\/ps.w.org\/hifqa-fraud-detector\/assets\/screenshot-2.png?rev=3742552","caption":"Signal Weight Personalization \u2014 the 17 signal weights adapt automatically when you override false positives, so the system learns your store's patterns."},{"src":"https:\/\/ps.w.org\/hifqa-fraud-detector\/assets\/screenshot-3.png?rev=3742552","caption":"Settings \u2014 choose your AI provider (OpenAI, Anthropic, Google Gemini, or self-hosted Ollama) and configure each optional layer."}],"raw_content":"\n
HIFQA Fraud Detector scores every WooCommerce order against 17 weighted\nfraud signals (disposable emails, address mismatches, card testing\npatterns, and more) the moment it is placed. The local scoring engine\nis pure PHP, requires no setup, and sends no data anywhere \u2014 it works\nimmediately after activation.<\/p>\n\n
Each order gets a score from 0 to 100 and one of three decisions:<\/p>\n\n
For stores that want deeper protection, two optional layers can be\nenabled separately \u2014 each stays off until you enter that service's\nAPI key in Settings:<\/p>\n\n
The local score is the baseline, and an AI reply is treated as\nuntrusted input:<\/p>\n\n
The optional layers contact the external service while the order is\nbeing placed<\/strong>, so checkout waits for the reply. A slow provider means\na slower checkout, and the AI layer can make several requests for one\norder. If a service fails or times out, the order is scored by the\nlocal rules alone. After three failures in a row a layer pauses itself\nfor ten minutes. With both layers off, no external request is made at\nall.<\/p>\n\n The admin dashboard is built from the unminified source in the HIFQA Fraud Detector can connect to the services below. Every one of\nthem is off by default<\/strong>. Nothing is sent until you save that\nservice's API key (or, for Ollama, its host URL) in\nHIFQA \u2192 Settings, and removing the key turns the layer off again. If\nno optional layer is configured, no order data leaves your site.<\/p>\n\n Customer names, full email addresses, IP addresses, phone numbers,\nstreet addresses and order items are never sent to any of these\nservices.<\/p>\n\n What \"order data\" means below.<\/strong> When the AI reasoning layer is on,\nthe following is sent to the AI provider you selected, once for each\nnew order:<\/p>\n\n If vector memory is also on, the closest matches found in your\nPinecone index are included (pattern type, similarity and the stored\ndescription of the pattern).<\/p>\n\n With OpenAI and Anthropic, the plugin also sends the results of its\nown checks when the model asks for them: the local risk score with the\nreasons behind it, and how many recent orders came from the same IP\naddress and from the same email (the numbers only \u2014 not the IP address\nor the email).<\/p>\n\n What \"pattern text\" means below.<\/strong> When the vector memory layer is\non, the order is reduced to a short line of text made of the names of\nthe signals that fired, the payment method ID and the country pair \u2014\nfor example Used for AI reasoning when OpenAI is the selected provider, and to\nturn pattern text into an embedding when vector memory is on with\nOpenAI selected.<\/p>\n\n Used for AI reasoning when Anthropic (Claude) is the selected provider.<\/p>\n\n Used for AI reasoning when Google Gemini is the selected provider, and\nto turn pattern text into an embedding when vector memory is on with\nGemini selected.<\/p>\n\n Anthropic does not offer an embedding model, so vector memory with\nAnthropic selected uses Voyage AI and needs its own Voyage AI key.\nWithout that key, vector memory stays off for Anthropic \u2014 the pattern\ntext is not sent to any other provider in its place.<\/p>\n\n Stores and searches fraud patterns for the vector memory layer, in an\nindex in your own Pinecone account.<\/p>\n\n Ollama is software you run on your own server. When Ollama is the\nselected provider, the plugin sends requests to the host URL you enter\nin Settings. Nothing is sent to ollama.com by this plugin. The data\nstays on your own infrastructure only if that host is a server you\ncontrol.<\/p>\n\n Yes. Local signal scoring runs on every order automatically with no\nexternal service required.<\/p><\/dd>\n The optional layers are called while the order is being placed, so a\nslow provider makes checkout slower for that order. If the provider\nfails or times out, the order is scored by the local rules instead and\nthe order note says so. After three failures in a row the layer is\npaused for ten minutes, and orders during that time are scored locally\nwithout waiting. A provider outage never causes an order to be marked\nas passed by the AI layer.<\/p><\/dd>\n No. A local block stays a block. Only you can release it, from the\nHIFQA dashboard.<\/p><\/dd>\nCompatibility<\/h4>\n\n
\n
Source code<\/h4>\n\n
src\/<\/code>\nfolder of this plugin. The full development repository, including the\nbuild tooling, is at\nhttps:\/\/github.com\/dilrubaummer\/hifqa-fraud-detector<\/p>\n\nExternal services<\/h3>\n\n
\n
example.com<\/code> \u2014\nnever the address itself)<\/li>\nstripe<\/code> or cod<\/code>)<\/li>\ndisposable_email address_mismatch cod_payment NG_to_US<\/code>.<\/p>\n\nOpenAI<\/h4>\n\n
\n
Anthropic<\/h4>\n\n
\n
Google Gemini<\/h4>\n\n
\n
Voyage AI<\/h4>\n\n
\n
Pinecone<\/h4>\n\n
\n
Ollama<\/h4>\n\n
\n
\n
\n
Does this work without any API keys?<\/h3><\/dt>\n
What happens if my AI provider is slow or stops working?<\/h3><\/dt>\n
Can the AI layer approve an order that the local rules blocked?<\/h3><\/dt>\n