Skip to main content

Signifyd for WooCommerce

Automated fraud detection and order protection for WooCommerce stores using Signifyd's machine learning platform.

Overview​

Signifyd for WooCommerce integrates WooCommerce with Signifyd's fraud detection platform to automatically analyze orders for fraudulent activity. The plugin submits order data to Signifyd's API, receives fraud assessments, and can automatically hold or cancel suspicious orders based on configurable rules.

Current Version: 1.1.5
Requires: WooCommerce, PHP 8.0+
Text Domain: suma-signifyd

Key Features​

Automated Fraud Detection​

  • Submits order data to Signifyd API on payment completion
  • Receives real-time fraud assessments (APPROVE, REJECT, HOLD)
  • Automatic order status updates based on Signifyd decisions

Webhook Integration​

  • Receives decision updates from Signifyd webhooks
  • HMAC signature validation for webhook security
  • Comprehensive webhook logging to dedicated file

Fulfillment Requests​

  • Send fulfillment data back to Signifyd
  • Track shipment information for order protection
  • Custom parsing via WordPress actions

Configurable Burn-in Period​

  • Test mode to observe Signifyd decisions without taking action
  • Gradual rollout capability for new implementations
  • Starting order ID filter to control which orders are processed

Order Data Collection​

  • Captures billing and shipping information
  • Card BIN data (when available)
  • IP address and session fingerprinting
  • Customer purchase history
  • Line item details with product information

Logging & Monitoring​

  • Dedicated log files for API requests/responses
  • Separate webhook log file for troubleshooting
  • Error tracking and validation logging

How It Works​

  1. Order Placement — Customer completes checkout in WooCommerce
  2. Payment Processing — Payment gateway processes the transaction
  3. Automatic Submission — Plugin sends order data to Signifyd API
  4. Fraud Analysis — Signifyd analyzes order using machine learning
  5. Decision Received — Plugin receives fraud assessment via API response
  6. Order Action — Based on decision and plugin settings:
    • APPROVE — Order proceeds to fulfillment
    • HOLD — Order status changed to on-hold
    • REJECT — Order status changed to failed/cancelled
  7. Webhook Updates — Signifyd sends updated decisions via webhook
  8. Action Hooks — Custom actions fire for third-party integrations

Use Cases​

  • High-Risk Industries — Electronics, jewelry, luxury goods
  • International Sales — Cross-border fraud detection
  • High-Volume Stores — Automated fraud review at scale
  • Chargeback Prevention — Protect against fraudulent chargebacks
  • Order Protection — Signifyd provides financial guarantee on approved orders

Architecture Overview​

The plugin uses a modular architecture with separate classes for different responsibilities:

  • Plugin — Main initialization and hook registration
  • Orders — Order data collection and submission logic
  • Payload — API payload construction
  • Settings — Admin configuration interface
  • Webhook Routes — REST API endpoint handlers
  • Session Fingerprint — Device fingerprinting
  • Log — Centralized logging functionality
  • Admin — Admin UI and meta boxes

Technical Requirements​

  • WordPress 6.4+
  • WooCommerce 8.0+
  • PHP 8.0+ with cURL extension
  • Valid Signifyd API credentials
  • HTTPS recommended for webhook security

Payment Gateway Support​

The plugin works with multiple payment gateways:

  • NMI Gateway (primary)
  • EBizCharge
  • PayPal
  • Other credit card processors

Note: Klarna orders are excluded from Signifyd submission by default.

Next Steps​