>all of my fraudulent purchases came from Vietnam to the point that at one time I put in an IPTABLES rule to block the entire country.

I can never work this out; it seems that scammers from different countries (or using hacked servers / proxies?) are attracted to different sites or types of ecommerce sites.

For example:

- One of my sites has huge fraud from Ukraine and Russia

- Another from Indonesia

- Another's problem country is Pakistan

I typically use https://siftscience.com to identify fraud, plus country-level blocks where it makes sense.

Damned shame that all the legitimate users from a given country get blocked thanks to the fraudsters!