Heatrail cannot stop a sale.
The risk check runs in the background, silently, in milliseconds, at the moment of payment. The customer sees nothing.
Fraud protection for online shops
Protect your shop from fraud. Free.
Heatrail quietly hashes your customers' digital footprint at checkout and flags orders with a high risk score. You catch stolen-instrument orders before they ship. A fraud one shop confirms becomes a warning for the whole network.
- Protect your own shop for free
- Minutes to install
- Customer data stays with you
- Data hosted in the EU
- GDPR compliant
- Works with custom stacks, WooCommerce, Shopify and others
A fraud one merchant confirms becomes an automatic warning for the others.
The gap nobody is watching
Heatrail covers the e-commerce gap that sits between the traffic layer, the server logs and the payment rail.
Bots are stopped before they reach your page. Money is watched during and after the payment. Between those two sits the order itself. In a fraudster's hands a stolen card can look like an ordinary customer. When the fraud surfaces later, the merchant pays.
- Before your page
Visitors
Your edge filter stops known-bad addresses and most bots before they reach the shop. A fraudster on a normal browser with stolen card data looks, to that filter, like any other visitor.
Your traffic filter takes care of this - Inside your shop
The order
One order from a fraudster may raise no suspicion on its own. When the same pattern has already repeated and been confirmed in other shops, Heatrail recognises it before the goods leave.
This is the part Heatrail watches - After the payment
The money
The bank and the card network check the payment. If the cardholder spots it and disputes it weeks later, the goods are already gone. Under the card rules the purchase amount and the scheme fee can fall on the merchant.
Banks and card networks handle this
Heatrail works quietly where the traffic filter and the payment check do not reach: inside your shop, at the moment the order is placed. That is where a hostile digital footprint can still be seen, and where a warning is still worth something.
Built to stay out of the way
Three promises, and none of them are soft.
Heatrail does not learn who the customer is.
Personal data is hashed in your shop before anything leaves, then hashed again on our side with a key that never leaves the server. Payment data is not sent.
One shop's lesson protects the others.
When a confirmed fraud pattern repeats, the next merchant does not have to discover it from scratch. Each new case makes the network more alert and makes it harder for a fraudster to hide their trail.
The answer
The risk score, the reasons, and the decision stay with you.
Heatrail is not an AI black box and not a self-learning model. Every order gets a risk score from weighted, named rules, with reasons you can read. Whether you ask for a further check is the merchant's call.
Cryptographic fingerprints compare overlapping risk traits. Changing only the IP, the device, the email or the SIM is not enough to hide the pattern. The aim is to push the fraudster's rotation cost above the gain of the next attempt.
Check result 412 ms
84
High. Worth a look before shipping.
- Same buyer at three other shops in the last hour
- Three gift cards in one order
- Account created two hours ago
- Browser says iPhone, hardware says desktop
Advisory. The order went through. What happens next is the shop's decision.
Try it
Turn signals on and watch the score move.
A worked example of the datapoint rules and how a risk score is built. Fraudsters do not know which detail they left behind when their next attempt at a new shop failed.
What is true about this order
Separate confirmed-fraud episodes give investigators a way to see related attempts across the network.
Check result 412 ms
72
High
Worth a look before you ship.
The decision to ship always stays with the merchant.
Qualitative risk signals
Reasons you can read, not a number you have to trust.
The risk score is a mix of network, device, software and behaviour patterns. The digital fingerprint they form does not disclose details to other members and is not reversible for them. It cryptographically binds the similarities Heatrail uses to score the next order and to warn before goods leave.
- Across shops Same buyer, four shops, one afternoon
- Memory Other shops have already marked this buyer as fraud
- Device Browser says iPhone, hardware says desktop
- Device Same device, several orders, one hour, one shop
- Context Gift cards or a digital product, three at once
- Context Order size is out of the ordinary
- Network The connection is hidden behind a VPN or a rented server
- Context The browser language is one your customers do not use
Scores come from rules, not an AI black box and not machine learning. No risk score is produced at random.
A door with two locks
We never learn who your customers are.
Email and phone are hashed in your shop with a keyed hash (HMAC) before anything leaves. Heatrail hashes that digest a second time with a key that never leaves our servers, and stores only the second hash. The address cannot be computed from it.
In a proceeding Heatrail tells the merchant which of their own checks sit on the trail. The merchant gives the investigator the raw customer data. Neither party can see the other shop's rows on their own. Every opening is written to the ledger.
Inside your shop
mari.tamm@example.eeb7f2 91c0 4e6a d8f3
Step one, in your shop, before anything is sent.
At Heatrail
b7f2 91c0 4e6a d8f3e41d 7a0b 2c95 f6e8
Step two, on our side, with a key we hold.
- Name
- Address
- Card number
- Phone
How it works
Three steps, and your customer sees none of them.
Your shop asks
An order arrives. Your shop sends a hashed payload in the background, with no personal data and no payment data.
Heatrail answers
The order is scored against the network at once. A low score is logged quietly. A high score notifies the merchant.
You decide
Ask the customer for another check? Personalise a digital good? Verify the phone by SMS? Ship and hope? The call is yours.
Install
An afternoon, and most of it is reading.
Heatrail fits any sales channel. The shop plugin takes minutes. Larger platforms get an SDK you can install from a Claude or Cursor brief. The rule is minutes, not hours.
Upload the plugin, open WooCommerce and Heatrail, paste four values. That is the whole install.
HEATRAIL_API_BASE=https://api.heatrail.eu
HEATRAIL_KEY_ID=hk_9f4c1e08b7a2d631
HEATRAIL_API_SECRET=…shown once in the portal…
HEATRAIL_NETWORK_SALT=…shown once in the portal…One call, where you already have the order. You get a score and the reasons. If we are slow or unreachable you get an empty answer, never an error your checkout has to handle.
$client = HeatrailClient::forShop($keyId, $secret, $apiBase, [
'network_salt' => $salt,
]);
$result = $client->check([
'order_ref' => $order->ref(),
'ip' => $order->customerIp(),
'email_h' => $client->hashEmail($order->email()),
], $idempotencyKey);
$result['score']; // 72
$result['reasons']; // the sentences your team readsAny programming language. Sign the request and post JSON. The reference shows the signature step line by line.
POST https://api.heatrail.eu/v1/check
Authorization: HR1 hk_9f4c1e08b7a2d631:{signature}
{
"check_id": "3f7a1c02-5b4e-4a19-8c3d-9e0b6d2f4a71",
"score": 72,
"reasons": [
"Customer identifier matched a network-confirmed fraud trail",
"Same identifier seen in 3 shops within 24 h"
]
}The full reference, with examples, is in the docs. Claude and Cursor install notes are included.
Network effect
One shop sees one order. The network sees the pattern.
The same buyer in four shops inside an hour looks ordinary to each merchant. Put the four together and you see the pattern.
No shop sees that alone, and no payment provider sees it either, because the orders are spread across several of them. The pattern exists only in the Heatrail network, which warns the next shop while the parcel is still on the shelf.
This is only one example of the behaviour patterns that raise heat on an order's risk score and call for a closer look.
From mark to warning
A fraud one merchant confirms becomes a warning for the others at once.
Picture a customer walking into a high-street till in odd clothes, face covered, and telling the cashier out loud that they just paid in the last shop with a stolen card and will do it here too. In the physical world the cashier would call the manager or security.
Online shops are 24/7 self-checkouts. Before Heatrail there was no control that could inspect an order like that. Most merchants do not even know a fraud got through at the moment they hand over the goods, digital or physical.
One confirmation, the whole network
The merchant confirms
- Shop A
- Shop B
- Shop C
The fraud is on record for that shop.
Others see it at once
- Shop A
- Shop B
- Shop C
The warning reaches every shop's checkout, before dispatch.
Network memory
One shop's expensive lesson does not have to be the next shop's.
A buyer the network has confirmed as fraud stays hot for up to 400 days: full weight for the first 90, then falling to a third by day 365. A shop reversing its own mark ends it sooner.
Risk scores follow a cooling trail. Heat is added when different merchants register incidents on the same trail. An ordinary customer does not pick up a high score for no reason.
buyers the network has seen confirmed fraud, hot up to 400 days
If Heatrail is down
Our bad day is not your bad day.
Every fraud control asks you to put something new between the customer and the pay button. So the fair question is what happens when that something breaks.
Nothing. Your shop gives us 0.8 seconds. If no answer arrives in time, the order goes through and the check waits in a queue until we are back. There is no case in which Heatrail stops a sale.
Heatrail answers
- Customer pays
- Score and reasons arrive
- Order confirmed
Heatrail does not answer
- Customer pays
- No answer in 0.8 seconds, check queued
- Order confirmed
Measured in live traffic
Your checkout gives us 0.8 seconds. We use half of it.
Every figure here was measured over a full day of real orders. The wait is enforced by your own shop, not by us, which is why our bad day cannot become yours.
386 mstypical answer 610 ms19 answers in 20 are faster 800 msthe limit, then the sale proceeds
Built to be checked
Do not take our word for it.
Every claim on this page can be checked. Start with these four. No account needed, and these pages are in English.
Public page What your customers can read about us The page shops link to from their checkout. Security Every control named. Every gap too. Assessed against OWASP ASVS Level 2, with open items listed as open. Data processing agreement Agreed at signup, versions kept Every version you could have accepted stays readable at its own permanent link. security.txt Found something? Tell us. Coordinated disclosure, RFC 9116. Good-faith research is welcome.
What it is worth
Money is the smallest part of what you get back.
A fraud you never shipped is a loss that never happened. What follows is the part nobody puts in a business plan: the weeks you do not spend on it, the orders you stop second-guessing, and a report that is already written.
Money
The loss that never happens.
Goods, shipping and the bank fee on an order you would have sent. One of those covers years of checks, and the card rules put that loss on you, not on the bank.
Time
No dispute to fight.
No evidence pack, no bank deadlines, no three weeks waiting on a decision that went against you the moment the parcel left. The work you avoid is worth more than the fee you avoid.
Peace of mind
You no longer have to guess.
Most orders are ordinary and now you can see that at a glance. The few that are not arrive with reasons, before the parcel leaves the shelf, while acting is still cheap.
Reporting
The report is already written.
When it is serious, Heatrail drafts the notice: what was seen, when, from where, and how many shops it touched, in the language the police expect. You read it and you send it. We never send anything to anyone on your behalf.
Heatrail is available free and paid. Free gives you eyes on your own platform. Paid joins you to the signals of the whole network.
Two plans
Free protects your shop. Pro adds everybody else.
Both plans install the same way and answer the same request in the same second. The difference is how much of the network you see.
Free protects you from your own history. Network signals are on Pro.
Free, and it stays free
Heatrail Free
€0
no card asked, no end date
Everything you need to recognise a buyer who has already burned you once.
- Every order scored, with the reasons in plain language
- Your own confirmed frauds remembered, so a returning buyer is recognised
- Warnings and cases in the portal, with what your shop learned about each order
- The plugin, the library and your API keys, waiting once the business is checked
On Pro
- What other shops have confirmed about this buyer
- The cluster view across your own orders
- The score that takes the whole network into account
Everything in Free, plus the network
Heatrail Pro
€0.05
per paid order, at any volume
The reason the network exists: a buyer who is new to you but not to others.
- Confirmed frauds from every other shop, in the same plain language
- The cluster view: which of your orders belong to one and the same buyer
- Your first 100 orders free, once, as a credit on the account
- Cancel any time in Stripe and drop back to Free, never to nothing
Included
- What other shops have confirmed about this buyer
- The cluster view across your own orders
- The score that takes the whole network into account
Free is a plan, not a trial. It does not run out and nothing switches itself off.
How to start
Four steps, and one of them is ours.
Signing up takes a few minutes and install takes a few more. Between them our team validates your company and sales channel, because signals are only useful if every shop behind them is real.
- 2 min
Register
Your company details and the agreements.
- Up to 24h
We check the company
Nothing dramatic. We just make sure everything is in order.
- 10 min
Install
With the plugin this is activation only. Otherwise a coffee-length development task.
- Under 1 s
Watch the first check
The first score reaches your checkout well under a second, and from then on it is in the portal too. Nothing about your checkout changed, and nothing waits for us.
You can stay on Free for as long as you like. Nothing here asks you to decide on Pro today.
Protect your shop today. Decide on the network later.
Joining takes a moment and install is within reach for anyone.