Bot Detection for
E-commerce

// Middleware: check buyer before checkout
app.post('/api/checkout', async (req, res) => {
  const ip = req.headers['x-forwarded-for']
    || req.socket.remoteAddress;

  const risk = await fetch(
    `https://api.ipasis.com/check?ip=${ip}`,
    { headers: { 'X-API-Key': API_KEY } }
  ).then(r => r.json());

  if (risk.trust_score < 30) {
    // High risk — likely bot
    return res.status(403).json({
      error: 'Transaction blocked',
      reason: 'suspicious_traffic'
    });
  }

  if (risk.trust_score < 60) {
    // Medium risk — add friction
    return res.json({
      requireCaptcha: true,
      riskLevel: risk.risk_level
    });
  }

  // Clean — proceed to payment
  return processCheckout(req, res);
});