How to Use the Geoverio IP Risk Score to Flag High‑Risk Orders

Why IP risk score matters in e‑commerce

When a customer places an order, the first thing a merchant should examine is the origin of the request. A high ip risk score indicates that the IP may belong to a VPN, proxy, TOR exit node, or a datacenter. Those signals correlate strongly with fraudulent activity. With Geoverio’s IP Lookup module, you can retrieve the score in a single request and decide how to treat the order.

Getting started: a single API key for all modules

Geoverio supplies one API key that covers every module. You authenticate with Authorization: Bearer YOUR_KEY and can query the IP Lookup endpoint, Sales Tax Finder, Address Autocomplete, or Payroll from the same base URL. The free tier gives you 1,000 lookups per month, enough to prototype a risk‑based workflow.

Endpoint format

The IP Lookup request uses the following pattern: GET https://api.geoverio.com/v1/ip/{ip_address} The response contains a risk_score field ranging from 0 to 100, as well as flags for VPN, proxy, TOR, and datacenter.

Mapping the score to actions

Define thresholds that suit your business. A common approach is:

• 0‑30: allow. The IP is low risk.
• 31‑70: challenge. Request additional verification, e.g., a captcha.
• 71‑100: block. Reject the order outright or route to manual review.

Implementing the check

import requests

ip = request.remote_addr
url = f"https://api.geoverio.com/v1/ip/{ip}"
resp = requests.get(url, headers={"Authorization": "Bearer YOUR_KEY"})
data = resp.json()
score = data.get("risk_score", 0)
if score > 70:
    handle_block()
elif score > 30:
    handle_challenge()
else:
    proceed_with_order()

Notice that the code stays simple. No additional parsing or third‑party libraries are required. The API returns all the flags you might want to use later for audit purposes.

Combining IP risk with other signals

IP risk score is powerful, but it should be part of a broader context. For instance, you can cross‑check the shipping address with Geoverio’s Sales Tax Finder to verify that the ZIP code matches the country of origin. If the tax calculation fails, that adds another layer of suspicion.

Similarly, the Address Autocomplete module can validate the entered street and city. A mismatch between the auto‑completed address and the IP geolocation indicates a potential fraud scenario.

Putting it all together

# Step 1: IP lookup
ip_data = get_ip_data(request.remote_addr)
# Step 2: Sales tax check
tax = find_tax(ip_data.city, ip_data.state)
# Step 3: Address autocomplete validation
autocomplete = autocomplete_address(user_input_address)
# Step 4: Decision logic
if ip_data.risk_score > 70 or not tax or not autocomplete:
    block_order()
else:
    process_payment()

Handling false positives

High‑risk flags can surface for legitimate users: corporate VPNs, remote workers, or travelers. Geoverio’s IP Lookup exposes granular flags. If is_vpn is true but the score is moderate, you might choose to challenge rather than block. The vendor’s IP risk checker shows that VPN traffic is labeled high but may be acceptable for certain customers.

Scaling the solution

The free tier gives 1,000 lookups per month. For production workloads, upgrade to a paid plan that offers higher limits and guaranteed latency. The API is RESTful and uses HTTP/2, so concurrent requests are efficient. Because the risk score is returned in milliseconds, you can embed the call in the checkout flow without noticeable delay.

Best practices for audit and compliance

• Log the raw response. The risk_score and flags are immutable audit evidence.
• Store timestamps to detect replay or stale data.
• Keep your API key secure. Rotate it if you suspect compromise.
• Respect the rate limits. Exceeding them can trigger temporary blocks.

Conclusion

Using Geoverio’s IP Lookup module to retrieve an ip risk score is a straightforward way to reduce fraud. The single API call gives you a 0‑100 score, detailed flags, and geolocation data. By mapping the score to clear thresholds and combining it with tax and address validation, you create a defensible checkout process that stays efficient and developer‑friendly.

Sources

• IP Risk Score: Real-Time Fraud Detection API | Fraudlogix
• Risk Score API for IP & Email Fraud Scoring | IP-API.io
• IP Score Checker: Risk & Reputation | InventiveHQ
• IP Risk Scoring: 40+ Signals Into One Number - GeoIPHub
• GeoIP Best Practices 2025: The Complete Developer's Guide to IP Geolocation with ip-api.io