IronPhantom Fraud Defense

No. In its current configuration, IronPhantom does not automatically block checkout, interrupt payments, cancel orders, issue refunds, or stop shipments. It provides risk indicators and decision-support information. Merchants remain responsible for deciding whether to approve, review, verify, hold, cancel, refund, or fulfill an order. Risk assessments do not guarantee that an order is fraudulent or safe.

The optional Behavioral AI Sensor analyzes interaction patterns such as mouse movements, scrolling behavior, click timing, session duration, and technical browser signals. These indicators help identify patterns potentially associated with bots, automated checkout abuse, credential stuffing, and suspicious sessions. The sensor is disabled by default and must be manually enabled by the merchant after reviewing the relevant privacy information. It is not intended to record payment card numbers, CVV codes, plaintext passwords, or private form contents.

After the merchant accepts the required privacy information and activates the service, IronPhantom connects to the MGFirewallAI backend for fraud risk analysis. Depending on the configuration, processed data may include order references, email addresses or pseudonymized identifiers, IP addresses, order amounts, timestamps, browser information, session metadata, and optional behavioral signals. IronPhantom does not collect or store full payment card numbers, CVV codes, plaintext passwords, or banking credentials. The service uses MGFirewallAI (https://redflagai.tech) to analyze fraud signals and return risk information to WooCommerce. Depending on the enabled features, risk analysis may involve external intelligence providers including:

• FraudLabs Pro (https://www.fraudlabspro.com) for fraud risk intelligence.
• ProxyCheck (https://proxycheck.io) for IP, VPN, and proxy intelligence.
• Have I Been Pwned (https://haveibeenpwned.com) for credential exposure intelligence.

Where available, IronPhantom supports identity verification through Didit (https://didit.me) for high-risk transactions or high-value orders. Verification is performed externally by Didit when the merchant initiates the verification workflow. IronPhantom receives only the limited verification result or status required to support the merchant's decision. IronPhantom does not store identity document images, biometric data, facial recognition data, or government identification files. The Verify User feature is available during the 5-day Pro trial and with an active Pro subscription, subject to the current service configuration.

IronPhantom is currently available for testing and evaluation without payment where access is provided. A 5-day Pro trial may be available to evaluate selected advanced features. Feature availability depends on the current service configuration. For additional details about privacy, data processing, external services, and service conditions, please refer to:

• Privacy Policy: https://redflagai.tech/privacy-policy
• Terms of Use: https://redflagai.tech/terms-of-use.html