Forums / Built-in Shipping and Payment Modules / Block Customers' Paypal Email Address or PAYERID?

Block Customers' Paypal Email Address or PAYERID?

Views: 25,410

Results 1 to 20 of 29
13 Nov 2009, 12:10 PM
#1
opal avatar

opal

New Zenner

Join Date:
Apr 2008
Posts:
70
Plugin Contributions:
0

Block Customers' Paypal Email Address or PAYERID?

Does anyone know if there is a way I can block payments from an email address? I've contacted paypal but not heard anything back, is there anything I can do in the store? The person has been banned and also their IP has been banned from the site but they change their IP and register to the store in another name but their paypal address stays the same. I need to block their paypal address due to their breach in the conditions of use and copyright infringement.

Thank you.

13 Nov 2009, 6:00 PM
#2
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,513
Plugin Contributions:
176

Re: Block Customers' Paypal Email Address or PAYERID?

That's a tough one ... because they can register several other email addresses at PayPal just like they can do in your store.

Are they violating your TOS? or PayPal's TOS? In what way?
Are they committing fraud? theft? If so, maybe it's worth reporting them to PayPal as thieves ... maybe that's a workaround (if it's true)?

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

13 Nov 2009, 7:14 PM
#3
opal avatar

opal

New Zenner

Join Date:
Apr 2008
Posts:
70
Plugin Contributions:
0

Re: Block Customers' Paypal Email Address or PAYERID?

Thank you :smile:

They are violating our tos at the store, they are buying and downloading the downloadable products and then sharing them at various file sharing sites and also sharing through yahoo groups. When they are approached to please stop they are rude, nasty and do it more, it's becoming a real pain! It's annoying that despite banning their ip they stil manage to come back with another. I finally heard back from paypal and they weren't much help at all! They said it can't be done, can you do anything in a zen store to block the paypal addy?

Thank you for your time,

Here's what paypal said:

Thank you for taking the time to contact us with your concerns. I am happy
to assist you further.

We offer a feature which allows you to decide how to deal with certain
types of incoming payments.

I am afraid that there is no option for you to blocked specific email
address in your PayPal account.

You can change your payment receiving preferences by following these steps:

  1. Log in to your account at https://www.paypal.co.uk
  2. Click ‘Profile’ near the top of the page.
  3. Click ‘Payment Receiving Preferences’ in the ‘Selling Preferences’
    column.

On this Payment Receiving Preferences page you will be presented with the
following options:

  1. Block payments sent to me in a currency I do not hold
    • This setting allows you to choose to accept, deny or be alerted each time
    you receive money in a currency which you don’t have an open balance for

  2. Block accidental payments: You may prevent accidental payments by
    blocking duplicate invoice IDs.
    • This setting allows you to prevent a buyer paying you twice for the same
    item or to allow multiple payments with the same invoice ID

  3. Block payments from users who initiate payments from the Pay Anyone
    subtab of the Send Money tab.
    • This setting allows you to redirect buyers to the payment section of your
    website if they try to send money directly through their PayPal account.
    This is useful for you if you need specific order information which comes
    through when a buyer uses your website to make their payment

  4. Block the following payments: Pay with eCheque or German bank transfer
    for all website payments except eBay (Note: You may not block eCheque
    payments on eBay)
    • This means that customers must use an instant payment method and you
    don’t have to wait for an eCheque to clear
    • Please note that this preference does not allow you to block eCheques
    that are sent using the Send Money flow

  5. Display ‘Add Instructions to Seller’ text input field:
    • This allows you to give the buyer the option to send you a message with
    their payment, sometimes used for specific instructions about their
    purchase

  6. The Credit Card Statement Name is the name that will appear on your
    customers’ credit card statements. The name can be 11 alphanumeric
    characters in length, including spaces.
    • You can enter what you would like your buyers to see on their credit card
    statements in the text box here

Finally once you have selected your preferences, click 'Save'.

It is my pleasure to assist you. Thank you for choosing PayPal.

13 Nov 2009, 11:30 PM
#4
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,513
Plugin Contributions:
176

Re: Block Customers' Paypal Email Address or PAYERID?

There are a couple options:

  1. Report the customer to PayPal as fraud. Maybe they've had complaints from others too, and their account might get terminated as a result.

  2. PayPal transactions occur between your merchant account and the customer's PayPal account. They have an account number assigned. You could write some custom code into your PayPal module to check whether a certain customer account number has been used, and take appropriate action. Depending which module you're using you could possibly do an immediate refund and cancel the order, or you could prevent checkout at all, or you could at least leave the order in a "pending review" status so the download isn't made available until you get a chance to review it ... at which time you could do a manual refund and cancel the order. There are various options, all with varying programming complexities depending on how you want to handle it.

Either way, blocking one account doesn't stop the customer from coming back and using another PayPal account.

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

15 Nov 2009, 12:08 PM
#5
opal avatar

opal

New Zenner

Join Date:
Apr 2008
Posts:
70
Plugin Contributions:
0

Re: Block Customers' Paypal Email Address or PAYERID?

Thank you so much :smile:

I've sent another long email to paypal so i'll see what I can do with that but I don't expect a reply from them in a long time and I don't suppose they'll be too helpful judging by my previous experiences of their customer service lol!

I'm using the PayPal IPN Website Payments Standard module in my zen store. It would be great if I could do something that could prevent checkout, what sort of thing can I do because I wouldn't have a clue where to start with a custom code for the paypal module. I think that would be enough to deter them from coming back if they couldn't check out :wink2:

Thank you so very much for your help!

15 Nov 2009, 11:41 PM
#6
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,513
Plugin Contributions:
176

Re: Block Customers' Paypal Email Address or PAYERID?

It's much more complicated with Website Payments Standard. It's much easier with Express Checkout.

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

16 Nov 2009, 11:15 AM
#7
opal avatar

opal

New Zenner

Join Date:
Apr 2008
Posts:
70
Plugin Contributions:
0

Re: Block Customers' Paypal Email Address or PAYERID?

Ok, thank you. Would it be better if I changed it to paypal express checkout then? Would it still work the same as the website payments standard with the auto redirect to the store for instant downloads? Also I have the paypal push order mod installed, would it work with that too?

Thank you so much for your time to stop by and help me out with this :hug:

16 Nov 2009, 1:21 PM
#8
opal avatar

opal

New Zenner

Join Date:
Apr 2008
Posts:
70
Plugin Contributions:
0

Re: Block Customers' Paypal Email Address or PAYERID?

I've changed it to PayPal Express Checkout now with no problem, how can I now prevent the persons email address from reaching the checkout?

Thank you!!

16 Nov 2009, 3:29 PM
#9
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,513
Plugin Contributions:
176

Re: Block Customers' Paypal Email Address or PAYERID?

  1. With Express Checkout, you need to also click "Remove" on the IPN/Standard module in Admin->MOdules->Payment

  2. The "push order" mod serves no purpose with Express Checkout because Express Checkout doesn't have the limitations that Standard has.

  3. You'll need to look up the offending customer's "PayPal Account Number" in your paypal records before you can do anything about blocking them.

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

16 Nov 2009, 4:04 PM
#10
opal avatar

opal

New Zenner

Join Date:
Apr 2008
Posts:
70
Plugin Contributions:
0

Re: Block Customers' Paypal Email Address or PAYERID?

I removed the PayPal IPN module, I tested the store with express and all was well and then realised that the paypal pushorder wouldn't be needed lol! Paypal Express is much better, I don't know why I didn't use it at first! Thank you!

I have the offending customers account number :wink2:

Thanks again! :hug:

16 Nov 2009, 4:31 PM
#11
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,513
Plugin Contributions:
176

Re: Block Customers' Paypal Email Address or PAYERID?

Around line 1786 of your /includes/modules/payment/paypalwpp.php file you have code that looks like the following. Add the additional highlighted code as shown:```
// get the payer_id from the customer's info as returned from PayPal
$_SESSION['paypal_ec_payer_id'] = $response['PAYERID'];
[B] if ($response['PAYERID'] == 'PUT_PAYER_ID_HERE') {
$this->terminateEC('Sorry, your transaction cannot be completed at this time.', true, FILENAME_CHECKOUT_SHIPPING);
}
[/B]
$gender = '';

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

16 Nov 2009, 4:41 PM
#12
opal avatar

opal

New Zenner

Join Date:
Apr 2008
Posts:
70
Plugin Contributions:
0

Re: Block Customers' Paypal Email Address or PAYERID?

Just to clarify so I get it right, I replace 'PUT_PAYER_ID_HERE' with their Payer ID which is the 13 digits of letters and numbers, nothing else, just 13 digit Payer ID?

And this code stops them from getting to the checkout?

And thanks again so very much for taking the time to help me out with this! :hug:

16 Nov 2009, 4:50 PM
#13
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,513
Plugin Contributions:
176

Re: Block Customers' Paypal Email Address or PAYERID?

Right. If their payer ID is "ABC1234567890" then you'd use:```
if ($response['PAYERID'] == '[B]ABC1234567890[/B]') {

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

16 Nov 2009, 4:52 PM
#14
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,513
Plugin Contributions:
176

Re: Block Customers' Paypal Email Address or PAYERID?

Keep in mind that I've not tested this code. But I've no reason to believe it won't work properly.

Also note that you'll have no record of the customer's attempt. They'll just be taken back to the checkout screen, probably even being prompted to login if they haven't already.

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

16 Nov 2009, 4:54 PM
#15
opal avatar

opal

New Zenner

Join Date:
Apr 2008
Posts:
70
Plugin Contributions:
0

Re: Block Customers' Paypal Email Address or PAYERID?

Thank you!!!!!!

I just tested it on myself and it worked a treat!!!

I can't thank you enough! You really do deserve a medal for all you do and all the help you give others! :hug:

16 Nov 2009, 4:58 PM
#16
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,513
Plugin Contributions:
176

Re: Block Customers' Paypal Email Address or PAYERID?

Glad it's working for you.

No medals required ... but if you're able to do something here we'd appreciate it: http://www.zen-cart.com/donate

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

16 Nov 2009, 5:21 PM
#17
opal avatar

opal

New Zenner

Join Date:
Apr 2008
Posts:
70
Plugin Contributions:
0

Re: Block Customers' Paypal Email Address or PAYERID?

Thank you :smile:

I happily made a donation for your help, wish it could be more but maybe after xmas I can do more lol! :wink2:

16 Nov 2009, 5:22 PM
#18
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,513
Plugin Contributions:
176

Re: Block Customers' Paypal Email Address or PAYERID?

Thanks! Wishing you well with your holiday sales.

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

20 Nov 2009, 7:23 PM
#19
opal avatar

opal

New Zenner

Join Date:
Apr 2008
Posts:
70
Plugin Contributions:
0

Re: Block Customers' Paypal Email Address or PAYERID?

You're welcome and thank you! :smile:

I was just wondering if I needed to add another payer ID how would I add it to the code?

21 Nov 2009, 6:13 AM
#20
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,513
Plugin Contributions:
176

Re: Block Customers' Paypal Email Address or PAYERID?

Opal:

I was just wondering if I needed to add another payer ID how would I add it to the code?
Here's an example of 3:

    if ($response['PAYERID'] == '[B]ABC1234567890[/B]' || $response['PAYERID'] == '[B]AnotherNumber[/B]' || $response['PAYERID'] == '[B]AgainAnotherETC[/B]') {

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.