Hacker News Reader

Is this data of who fraud was happening to, or the IP address perpetrating the fraud (probably behind a proxy)?

Sift Science intern here. We used the latter for the purposes of this map.

Also, it's unclear if that's per capita or just the total number of fraudulent acts by IP origin.

it's per capita. Total fraudulent transactions/total transactions in each country.