iFraud™ Risk Memory

A significant portion of losses in e-commerce does not stem from one-time major attacks, but from recurring small risks. Customers who do not accept cash-on-delivery orders, users who use and return products, accounts paying with stolen cards, or suspicious individuals returning with different email addresses can generate substantial costs for a business over time.

Often, the problem is not just that the risk occurred. The main issue is the lack of systematic memory of these risks. A staff member remembers an incident, then forgets. Personnel changes, and the information is lost. A customer returns with a different email address, and their past risky behavior goes unnoticed.

iFraud™ Risk Memory is the IHASHOP security module designed to bridge this gap. It transforms risky incidents into corporate memory. It links records not just to the customer's name, but to traces such as email, phone, IP address, and domain name. This way, even if a person returns with different information, the system can warn the administrator.

The module operates on two layers. The local risk memory provides protection using only the records stored in the store's own database. The optional central risk network can create a shared awareness layer consisting of approved risk traces from stores within the IHASHOP ecosystem.

iFraud™ prioritizes personal data security. Plain personal data is kept encrypted in the store's own database. Plain data like email, phone, or IP is not sent to the optional central network; matches are made using only irreversible HMAC fingerprints.

The most important design decision is this: iFraud™ never automatically blocks any customer. It does not halt payments, cancel orders, or display warnings to customers. It only provides an early warning in the admin panel and leaves the decision to the store owner. Because not every risk match indicates definite fraud. Thus, iFraud™ is not a blacklist, but a security consultant providing pre-decision information.