CiviCRM Stack Exchange is a question and answer site for administrators and users of the CiviCRM Constituent Relationship Management software. It only takes a minute to sign up.
Sign up to join this community
We have had a particular email address used for registering a number of different participants for workshops in CIVIEVENT - and subsequently cancelling - that we believe is an immigration scam. Wondering if there is a way to disable this particular address from registering.
Thanks!
Did you check your log files to see if the fraudulent Event registrations originate from the same IP (or similar)?
If so then block that IP (or entire subnet) so that it can no longer access your server.
For those using iATS Payments there is another handy anti-fraud measure: you can block credit cards originating from certain BIN countries to go through;
It's hard to answer this question without more information, but I'll give it a shot.
My first approach would be to write a CiviCRM extension using hook_civicrm_validateForm. This would give a result similar to if someone left out a required field - it would reload the page with an error.
If your goal is instead to allow them to register (and it's a free event) but not see the results, Michael M's suggestion of a CiviRule to delete the event after it's created may work.
If your goal is something else - e.g. to fake a successful event - you'd have to give more details, but is likely to be more difficult.
validateForm hook is a good choice then, because it prevents the form from being submitted. You could also use the postProcess hook to fake a successful event registration, but kill it before it reached PayPal. They'll know they didn't succeed when the card isn't charged though.
– Jon G - Megaphone Tech
Dec 5 '16 at 17:45
