Add Google reCAPTCHA
MembershipWorks implements our own anti-spam and anti-fraud system
by detecting suspicious activity that repeatedly targets the same form.
But as web fraud and spam activity increase in volume and
sophistication, you can implement an additional layer of security by enabling Google reCAPTCHA. Learn other ways to prevent fraud.
Adding
Google reCAPTCHA to your website and entering your reCAPTCHA keys into
MembershipWorks can help prevent fraudulent credit card transactions
from occurring on your site. Typically these fraudulent
transactions are a result of card testing. Card testing is used by
criminals to test a batch of stolen credit cards to see if the credit
cards are still usable. These criminals like to target legitimate
websites that accept small amount transactions (under $100).
MembershipWorks integrates with the latest generation v3 reCAPTCHA, which is invisible to users – your members do not have to actively identify any text or objects when submitting the form. Google detects robot activity through advanced risk analysis techniques based on how the user is interacting with your website.
Adding
Google reCAPTCHA does not require that you disable MembershipWorks
built in anti-spam and anti-fraud system, so you have the benefit of
defense in depth with both systems combating bot and fraudulent/spam
activity.
Google
reCAPTCHA is also an industry accepted anti-spam / anti-fraud system
that may be required by your payment gateway (Stripe, PayPal,
Authorize.net, etc) if you have been a victim of previous fraudulent
activity on your website.
Step by Step Instructions
Step 1: Sign up for reCAPTCHA
Sign up for a reCAPTCHA account on Google’s website: https://www.google.com/recaptcha.
Step 2: Register Site
Register for a new site. On the registration screen, select reCAPTCHA v3 and make sure to include all domains where your MembershipWorks forms
may be used. For example if you may have your event registration forms
on other websites, you will need to include those domains otherwise the
registration form will not work on those domains.
Step 3: Obtain Site & Secret Key and Input into MembershipWorks
After registration, you will be provided with a Site Key and Secret Key. In MembershipWorks, log in as the primary admin and go to Organization Settings > Security. Enter the keys from Google in the applicable fields.
You
can specify the minimum score required to allow the transaction
through. A score of 0.0 means the transaction was highly likely
generated by a bot, while a score of 1.0 means the transaction is likely
a good interaction. The default score is 0.5. Note that Google will
take some time to learn user patterns on your website and it will
usually score transactions as 0.5 initially, so do not require a score
of higher than 0.5 at first or users will not be able to signup or
register for your events.
Step 4: Adjust Minimum Score
After adding the keys and specifying your minimum score, click Save & Continue at the bottom of the page.
Step 5: Test Your Forms
Test your website forms to be sure they work properly.
It is important to test
your forms immediately afterwards by signing up as a new member or
registering for an event. Any error in the registration in Google or any
error in copying the keys to MembershipWorks will cause your forms to
not work.
Get Support Along the Way
