HELP! My account keeps getting attacked and my payment processor is threatening to shut my account

  • cmedens
    Asked on December 21, 2020 at 12:07 PM

    Our account has had 1400 verification attempts since 12/19 (exceedingly more than normal). Below is the message that I just received from Braintree Payments

    I have made several attempts to secure all of our forms.

    1.) I have added a reCaptcha to the forms that are published.

    2.) I tried enabling the check on Unique Submissions to "Check cookies and IP", but because I send the same form to our members every week, people are getting the error message, "One submission only allowed" I think because it's recognizing their cookies and IP from a previous submission in a previous week.

    3.) I already use the Form Calculation widget, but I'm not sure how to change the setting to a Unique Question. Is it possible for each form submission to generate a unique key and then to use that key as the "unique question". That way, it should be unique every time for authentic submissions.

    4.) I just added a password to protect the form. Will this help at all?

    5.) I only have one published form accessible on the internet (so far as I'm aware). Is it possible that forms are being attacked that I don't know about it? Is it possible to identify which form is being attacked? Because I don't use the other forms, I have the "Check cookies and IP" set to all of them just in case.

    We have spent many hours figuring out how to use both Jotforms and Braintree Payments to run our business and it would be devastating to have our account cancelled because of repeated attacks.

    If it's at all possible to take a look at the form on your end and make sure it is as secure and functional as it can be, that would be super appreciated. Thank you!

    Email from Braintree Payments...

    Hi Chas,


    Your gateway is being attacked again via verifications. I'd reach out to Jotforms and have them implement reCAPTCHA and a honeypot as quickly as possible. Our partnering bank is now threatening to shut down your processing if this is not resolved within the next few business days.


    Best,


    Geoff

  • Carlos_C
    Replied on December 21, 2020 at 1:15 PM

    Hello There!

    After checking your form https://form.jotform.com/200883699379172 I can confirm that now have the password protection.

    With the password protection and the verification of IP/Cookies, you have the security that just some user with the password can submit one response at a time.

    Please feel free to reach out if you have other questions or need some more help. I will be happy to help!