Fabrizio D.

IronPhantom Antifraud brings next-generation AI fraud detection to WooCommerce.
Every online store has a story — some end in growth, others in chargebacks. 
IronPhantom changes that story.
Powered by MGFirewallAI, it analyzes every order and login in real time — detecting risky behaviors, stolen credentials, compromised emails, and suspicious IPs before fraud happens.
Each merchant receives a personal dashboard connected to MGFirewall, where transactions, alerts, and live risk scores are displayed in real time.
Requires an API key (free to generate) — every merchant has their own secure key linked to their dashboard for full visibility and control.
IronPhantom works independently, is fully GDPR-compliant, and does not modify WooCommerce or Core files.
Protect your store, your customers, and your reputation — with AI-powered defense that never sleeps.
<h3>Key Features</h3>
<ul>
<li>AI-Powered Fraud Detection – analyzes every order and login in real time using the MGFirewallAI engine. </li>
<li>Opt-In Privacy Mode – no data is sent unless you explicitly enable fraud checks in the plugin settings. </li>
<li>Free API Key Integration – each merchant has a personal key linked to their MGFirewall dashboard for live risk insights. </li>
<li>Real-Time Protection – instant fraud scoring during checkout and login events to stop fraud before it happens. </li>
<li>GDPR-Compliant Logging – no sensitive or personal data (PII) is stored locally; all signals are pseudonymized. </li>
<li>Clean Uninstall – safely removes all plugin options and meta keys on deletion. </li>
<li>WooCommerce HPOS Ready – fully compatible with WooCommerce’s High-Performance Order Storage.</li>
</ul>
<h3>Easy install (recommended)</h3>
<ol>
<li>In your WordPress admin, go to Plugins → Add New. </li>
<li>In the search box, type IronPhantom Antifraud. </li>
<li>Click Install Now, then Activate (WooCommerce must be active).</li>
</ol>
<h3>Manual install (ZIP upload)</h3>
<ol>
<li>Download the plugin ZIP. </li>
<li>Go to Plugins → Add New → Upload Plugin, choose the ZIP and click Install Now. </li>
<li>Click Activate (WooCommerce must be active).</li>
</ol>
<h3>Setup (first-time configuration)</h3>
<ol>
<li>Go to WooCommerce → Settings → General. </li>
<li>Scroll to the IronPhantom Antifraud section. </li>
<li>Tick Enable data sending (consent) to allow fraud checks. </li>
<li>Paste your IronPhantom API Key in the field IronPhantom API Key.
<ul>
<li>Don’t have a key yet? Request your FREE key by emailing apikey@redflagai.tech. </li>
<li>Each merchant receives a personal key linked to their MGFirewall dashboard. </li>
</ul>
</li>
<li>(Optional) Enable Diagnostic logs while testing. </li>
<li>Place a test order or log in to see the real-time antifraud checks in action.</li>
</ol>
<h3>Privacy</h3>
IronPhantom Antifraud connects your WooCommerce store to the MGFirewallAI SaaS platform to analyze potential fraud signals and protect your business from chargebacks and account abuse.
Opt-in only. 
No data is ever sent automatically — the plugin works only after you enable the consent option in your WooCommerce settings.
What data is sent (only when enabled): 
– Customer billing email (order only) 
– Public IP address of the buyer 
– Order ID and order total 
– Timestamp (server local time) 
– Login flow: current URL right after login 
– Technical metadata required for fraud analysis (browser, device, user agent) 
– Optional “fingerprint” placeholder (for future device profiling)
Never sent: 
Passwords, payment card numbers, or sensitive personal data.
Endpoint used for fraud analysis: 
 POST https://redflagai.tech/api/predict
Headers used: 
– <code>Content-Type: application/json</code> 
– <code>x-api-key: <your merchant key></code> (required for authentication)
Stored locally by the plugin: 
– On the order: <code>ironphantom_tx_id</code>, <code>ironphantom_risk_level</code>, <code>ironphantom_motivi</code>, <code>ironphantom_sent</code> 
– On the user (temporary flag after login): <code>ironphantom_appena_loggato</code>
Uninstall: 
Removing the plugin deletes all its settings and the above meta keys from the database.
More information: 
– Privacy Policy: <a href="https://redflagai.tech/privacy-policy" rel="nofollow ugc">https://redflagai.tech/privacy-policy</a> 
– Terms of Use: <a href="https://redflagai.tech/terms" rel="nofollow ugc">https://redflagai.tech/terms</a> 
– Contact: <a href="mailto:security@redflagai.tech" rel="nofollow ugc">security@redflagai.tech</a>
You can stop all transfers at any time by disabling the consent checkbox in the plugin settings.
<h3>Troubleshooting</h3>
In the event that IronPhantom is unable to establish a connection with the MGFirewallAI security network, please follow the diagnostic procedure below before contacting support.
<ol>
<li>
Navigate to WooCommerce → Settings → IronPhantom Anti-Fraud and enable the option “Enable Diagnostic Logs”. 
This will activate detailed logging for real-time connection and verification events.
</li>
<li>
Perform a test order on your store (for example, using a low-value product or sandbox checkout) to generate the diagnostic log. 
This step is essential to capture the communication between your store and the MGFirewallAI endpoint.
</li>
<li>
Go to WooCommerce → Status → Logs and select ironphantom-antifraud from the dropdown list. 
Review the log entries to identify any connectivity or authentication issues.
</li>
<li>
If you are unable to determine the cause, click Download Log and attach the file in your message to our Security Operations team at 
📧 security@redflagai.tech
</li>
</ol>
The Security Operations Team will analyze the diagnostic log and provide tailored guidance to restore connectivity. 
In most cases, connection issues are related to one of the following: 
– API key not yet activated or expired 
– Firewall or hosting provider blocking outgoing requests 
– Temporary server maintenance or plugin update in progress
For continuous protection and optimal system performance, keep diagnostic logging disabled during normal operations.

IronPhantom Antifraud

IronPhantom Antifraud brings next-generation AI fraud detection to WooCommerce.

linknacional

The Fraud and Scam Detection For WooCommerce plugin helps protect your online store by adding a verification layer to the WooCommerce checkout. 
Using Google reCAPTCHA, the plugin automatically analyzes user interactions and blocks suspicious checkout attempts, reducing fraudulent transactions and ensuring safer payments.
Main Features: 
– Integration with Google reCAPTCHA; 
– Protects WooCommerce checkout against automated bots and fraudulent activity; 
– Configurable minimum score threshold for human-like behavior detection; 
– Lightweight and optimized for performance.
Dependencies
This plugin requires <a href="https://woocommerce.com/" rel="nofollow ugc">WooCommerce</a> to be installed and active. 
You also need valid <a href="https://www.google.com/recaptcha/admin/create" rel="nofollow ugc">Google reCAPTCHA API keys</a>.
User instructions
<ol>
<li>
Go to WordPress admin panel > WooCommerce > Settings > Anti-Fraud;
</li>
<li>
Enable the reCAPTCHA option;
</li>
<li>
Enter your Google reCAPTCHA Site Key and Secret Key;
</li>
<li>
Set the minimum score threshold (higher values = stricter validation);
</li>
<li>
Optionally enable debug mode to log requests and responses;
</li>
<li>
Save the settings. From now on, the WooCommerce checkout will require reCAPTCHA validation.
</li>
</ol>
<h3>External services</h3>
This plugin integrates with Google reCAPTCHA v3 service to provide fraud and bot protection for WooCommerce checkout processes.
What the service is and what it is used for: 
Google reCAPTCHA v3 is a security service that analyzes user behavior to determine if a user is likely human or bot. It’s used to protect the WooCommerce checkout process from automated fraud attempts and malicious activities.
What data is sent and when: 
When a customer attempts to complete a checkout on your WooCommerce store, the plugin sends the following data to Google reCAPTCHA servers: 
– User’s IP address 
– Browser and device information 
– User interaction patterns during checkout 
– reCAPTCHA response token
This data is sent every time a customer loads the checkout page and attempts to place an order.
Service terms and privacy policy: 
– Google reCAPTCHA Terms of Service: https://developers.google.com/recaptcha/docs/terms 
– Google Privacy Policy: https://policies.google.com/privacy

Fraud and Scam Detection For WooCommerce

Add Google reCAPTCHA verification to WooCommerce checkout to prevent fraudulent transactions.

IronPhantom Antifraud vs Fraud and Scam Detection For WooCommerce