Can I catch someone using a VPN? How ?

[Rug Love]

Someone is sabotaging my online business, a rival . With fake orders . They are using a VPN. How can I catch them out, or lead them into a trap to discover the true details - I know enough it is, I just need to prove it ? Any help guys ? Cheers

 

[FDDOWLING]

That sucks! I’m curious about this myself though can you catch some using a VPN! I don’t guess you could trace an IP address when they are using it!

 

[Rug Love]

Yeah it’s frustrating bro . Just wondering if any of the wizards on here knew a hack or trap I could place

 

[splishsplash]

Yeah it’s frustrating bro . Just wondering if any of the wizards on here knew a hack or trap I could place

It's not possible to get someone's real IP through a VPN.

I don't understand how this is an issue though.. Fake orders? Surely he has to pay to order?

 

[DunderMannen]

It's not possible to get someone's real IP through a VPN.

I don't understand how this is an issue though.. Fake orders? Surely he has to pay to order?

Yes it is. But it depends on what VPN they have.

Also; if it's used for vreating fake orders, is this with cc fraud? in that case they're most likely not only using a VPN.

 

[splishsplash]

Yes it is. But it depends on what VPN they have.

Also; if it's used for vreating fake orders, is this with cc fraud? in that case they're most likely not only using a VPN.

Definitely not possible unless you have a backdoor on the VPN.

A full IPsec VPN routes ALL packets through the VPN. It's a full tunnel. Nothing can be sent outside it. A VPN is using a virtual network adaptor, so anything sent, no matter whether it's accessing a webpage, javascript or any other protocol will go through the tunnel.

I'm open to hearing how you would go about getting someone's real IP behind a VPN though, but as far as I know, there is no known way. You can sometimes get someone's real IP through tor through exit node manipulation, but not VPNs.

 

[DunderMannen]

Definitely not possible unless you have a backdoor on the VPN.

A full IPsec VPN routes ALL packets through the VPN. It's a full tunnel. Nothing can be sent outside it. A VPN is using a virtual network adaptor, so anything sent, no matter whether it's accessing a webpage, javascript or any other protocol will go through the tunnel.

I'm open to hearing how you would go about getting someone's real IP behind a VPN though, but as far as I know, there is no known way. You can sometimes get someone's real IP through tor through exit node manipulation, but not VPNs.

DNS leaks? Hence me saying depending on the VPN

 

[TomTheCat]

Someone is sabotaging my online business, a rival . With fake orders . They are using a VPN.

Block those IPs before they place the orders.

 

[Repulsor]

Are you self hosting your shop? Do you have full access to your server? Have you seen any patterns in the fake orders? Same IP? Same IP range? Weird Refferrers? Weird Useragents?

When exactly is an order fake? Is he doing chargebacks?

Please tell us more details someone here can suggest a possible solution.

 

[Rug Love]

Yes 1 location has spent 22 hours on my site . As I have video logs . Would a random VPN pick a certain location all the time or not ? It’s not a main city . No it’s shopify . Weird pattern would be placing orders then live chat 2 seconds after several times asking has it been dispatched .
My fraud app flags it as high risk due to the IP being miles from the delivery addesss . I know it’s easy set up s free email .. but where is he getting these bank details from ? Some have been Klarna, regular payments and PayPal .. PayPal never clears and is an Echeque that is always held by PayPal . We are involved in a email back and forth where he’s saying he report me if I don’t change my name as I’m threatening his intellectual property . What is an IP range or user agent ? What should I be looking for ? I just need lay a trap to catch him somehow then it backs me up in court that he has been harassing me . Can he open up several PayPals with just his own bank details ? It’s not out the realms he’s using friends from around the country to deliver stuff too. Maybe I need get s bit more investigative, like look at electrol roll of the addresses he is asking these to go too. Nearly always comes in via google shopping suspect just wasting my PPC budget . Any tips or hacks i can try .. in layman’s terms . I’m desperate guys. Can’t focus or sleep

 

[Mi C]

You can sign up for the free service in FraudLabs Pro and link it with your shopping cart.

It screens all orders and detects all VPN connections.

 

[Psh]

I don't understand how this is an issue though.. Fake orders? Surely he has to pay to order?

I had the same problem happen to me. A competitor (and friends of his) placed orders via my site, and then did chargebacks at the same time, saying that it was a scam. I got an instant perma ban by PayPal (+ domain backlisted) and lost a 6 figure/year site. Lovely.

 

[laur.laurix]

I know paypal is retarded but for a six figure / year website I would fight them to death.

I had the same problem happen to me. A competitor (and friends of his) placed orders via my site, and then did chargebacks at the same time, saying that it was a scam. I got an instant perma ban by PayPal (+ domain backlisted) and lost a 6 figure/year site. Lovely.

 

[Rug Love]

Sorry to hear that bro - how awful . How does the charge back and domain black list thing work ? Like what will he be trying to do next and how do I prevent ? Do PayPal ban you for what ? The customer saying they have not had the parcel yes

 

[HustleTong]

You need someone from the dark(net)

 

[Carnaged]

I think your making this more of a hassle than it should be. a few avenues like:
1. Unfortunately your internet service provider/VPN was automatically flagged from previous persons fraudulent activity. Before an item can be shipped, please provide 3 seperate points of ID including 1 item that shows your name, photo and address(IE. Drivers licence) and send them to blah.
2. Block the ip's each time
3. tell them that when the money clears the item will be shipped with tracking and signage.
4. tell them that due to recent activity, a tracker and signature is required on pickup
5. tell them that his location & his postal address and provide proof of address.
though some of the documents can be forged, atleast you got something to back u up with. not to mention tracking with signage will make them think differently too. i think they'll then give up and move to another site.

 

[splishsplash]

I had the same problem happen to me. A competitor (and friends of his) placed orders via my site, and then did chargebacks at the same time, saying that it was a scam. I got an instant perma ban by PayPal (+ domain backlisted) and lost a 6 figure/year site. Lovely.

PayPal are really an awful company. These kind of tactics shouldn't work, but unfortunately they do

 

[DamoHG]

The majority of people that use VPN have IP addresses that are allocated to a data centre. Use this website https://iphub.info/ paste the IP most of the time it will show as "Hosting, proxy or bad IP" if they are using a VPN/Proxy. If it shows as "Good IP (residential or business)" then it's probably not a VPN.

 

[The Scarlet Pimp]

block the vpn's ip numbers.

 

[Keljmenc]

block the vpn's ip numbers.

This is interesting, and I believe you know what you are talking about, but if it is (easy) doable, VPNs as service is pointless.