Last Updated Dec 29, 2023

How to Use IP Geolocation for Fraud Prevention

Elizabeth (Lizzie) Shipton

Table of Contents:

Get your free
key now
4.8 from 1,863 votes
See why the best developers build on Abstract
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
No credit card required
Get your free
IP Geolocation API
key now
4.8 from 1,863 votes
See why the best developers build on Abstract
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
No credit card required

These days, with more and more people relying on online services for their banking, healthcare, work, and more, fraud prevention is more important than ever. If you provide a service to your users that collects sensitive data such as an email address, mobile number, password, credit card number, social security, physical address, or other personally identifying information (PII) you must ensure that your user’s data is kept safe.

One way to minimize potential fraud and keep your users safe is to use geolocation data to bolster your security measures and provide an additional layer of protection. In this article, we’ll look at IP geolocation - what it is, and how you can use it to improve your users’ online security.

Let’s begin.

Let’s send your first free
IP Geolocation API
See why the best developers build on Abstract
Get your free api

What is IP Geolocation?

An IP address is a string of numbers that identifies a device to a network. Every device connected to the internet has an IP address, including desktop computers, laptops, phones, and even smart devices like refrigerators.

An IP address is a unique string that not only tells the network where to send data requests and deliver web pages and downloads, but it also contains valuable information about the device’s real-world geographic location.

IMAGE: ip-address

Using a service like an online IP database or geolocation API, you can get location data about where a request is coming from. An IP address can’t tell you specifics like a user’s name or phone number, but it can tell you the user’s latitude and longitude, country, city, region, zip code, ISP (Internet Service Provider) data, and carrier information.

What is the role of IP Geolocation in Fraud Prevention?

This data can be used to improve the user experience by allowing sites and apps to serve data in the user’s native language, display prices in the correct currency, and serve ads targeted to the user’s geographic region. It can also be used to bolster fraud prevention strategies.

Let’s explore the various roles IP geolocation can play in anti-fraud measures.


If you have user data in your database showing that a particular user registered for your site or app in the United States, but you get a login attempt from that user in Spain, that may be a red flag that the user’s account has been compromised.

IMAGE: user-authentication

By checking for discrepancies in the geographic location data obtained from the IP address for an incoming login attempt, you can catch requests coming from unexpected locations. Sometimes requests coming from different locations are harmless - the user is on vacation or simply in a new place - but sometimes these could indicate suspicious activities.

Credit Card Security

IP data can also be used to provide an additional layer of validation on e-commerce sites. By comparing the address data on a request to the shipping addresses stored for users in your database or the billing address on the card, you can ensure that credit card transactions are coming from the actual card owner and reduce the occurrence of fraudulent transactions.

VPN Detection

Some IP geolocation services can tell you whether or not the incoming request is coming from a VPN, via proxy servers, or through a Tor network. These are common ways that fraudsters get around geolocation detection to do things like access content in geofenced regions.

If you determine that a request is coming through a VPN, you may choose to block the request and require the user to turn off their VPN before trying to use your services.

Block Requests from High-Risk Locations

Some geographic locations are known to be high-risk areas for scammers, hackers, and other suspicious activities. Many geolocation information services maintain a blacklist of known high-risk IP addresses that an incoming request can be checked against to ensure it isn’t coming from a high-risk address or area. This is known as blocklist matching.

By blocking requests from high-risk areas, you prevent potential fraudulent behavior like account takeover.

IMAGE: high-risk-locations

How to Use an IP Geolocation API

Let’s walk through how to set up real-time IP geolocation detection using a free online API.

1. Acquire an API Key

Navigate to the API page and click the “Start for Free” button. If you’ve never used AbstractAPI before, you’ll need to create a free account.

Once you’ve signed up or logged in, you’ll land on the API’s homepage where you should see your API key.

2. Use the API Key to Send a Geolocation Request

Let’s say for the sake of this tutorial that you’re verifying a user from the front end of your React web app or website.

We’ll write a function called getUserLocationFromAPI to send a request to the API for geolocation data and examine the JSON result.

const apiURL = ''
 const apiKey = 'YOUR_API_KEY';


 const getUserLocationFromAPI = () => {
   try {
     const response = await axios.get(apiUrl, {api_key: apiKey});
   } catch (error) {
     setError('Something went wrong getting Geolocation from API!')

Take a look at the log of the response data. You’ll see a JSON object like this:

  "ip_address": "200.68.143.XX", // IP redacted
  "city": null,
  "city_geoname_id": null,
  "region": null,
  "region_iso_code": null,
  "region_geoname_id": null,
  "postal_code": null,
  "country": "",
  "country_code": "",
  "country_geoname_id": 39960XX,
  "country_is_eu": false,
  "continent": "North America",
  "continent_code": "NA",
  "continent_geoname_id": 62551XX,
  "longitude": -XX.0111,
  "latitude": XX.4371,
  "security": {
    "is_vpn": false
  "timezone": {
    "name": "America/XX",
    "abbreviation": "XXX",
    "gmt_offset": X,
    "current_time": "XX:XX:XX",
    "is_dst": true
  "flag": {
    "emoji": "XXX",
    "unicode": "U+XXXX U+XXXX",
    "png": "",
    "svg": ""
  "currency": {
    "currency_name": "XX",
    "currency_code": "XXX"
  "connection": {
    "autonomous_system_number": 284XX,
    "autonomous_system_organization": "XXXX",
    "connection_type": "Cellular",
    "isp_name": "XXXX",
    "organization_name": "XXXX"

This information tells us exactly where the user is in the world. All we need to do now is pull the user data we have stored on our server from signup and compare the geographic location of this request to the stored data.

You could also compare this data to the billing information the user entered for their credit card.

Challenges of Using IP Geolocation for Fraud Detection

IP geolocation is a powerful tool, but it is not without its caveats. There are a few ways IP geolocation can go wrong, so it’s important to back up this method with other fraud prevention strategies for a truly robust security solution.

Geolocation Accuracy

The first thing to remember is that geolocation data is not 100% accurate. It can only tell you a general region or radius for the incoming request. It can’t pinpoint a device’s location to a specific street address. And the smaller the location radius becomes, the less accurate IP geolocation gets.

Typically, you can expect the following level of accuracy when looking up user locations.

  • Country: 95% to 99%
  • Region (State): 55% to 80%
  • City: 50% to 75%


VPNs (Virtual Private Networks) spoof a device’s IP address to make it look like it’s coming from a different place. These days, VPN use is incredibly common, even among users who aren’t engaging in fraudulent activities. People want privacy online, and they don’t want companies tracking their locations.

Unfortunately, this means that determining which requests are coming from trusted users and which are coming from hackers and scammers has gotten much more difficult. Some IP services can detect that a request is coming through a VPN, however, they can’t detect what the real IP address of the underlying request is.

False Positives

Let’s take the example of comparing an incoming request location for a credit card purchase to saved billing information about a user. If the request is coming from Spain but the user’s registered address is in the US, that might seem like a clear-cut case of fraud.

Unfortunately, in today’s world of remote work, digital nomads, and global commerce, that simply isn’t the case. It’s entirely possible that a user could be making purchases halfway around the world from their registered address.

By rejecting every potential transaction that doesn’t match its billing address, you could be turning away thousands of potential customers.


At the end of the day, the benefits of using IP geolocation to prevent fraud far outweigh the risks. It’s easy enough to send an SMS message or email to a user when you detect potential fraudulent activity on their account and give the user a chance to either authorize or dispute a suspicious transaction.

If you aren’t using IP geolocation to secure your users’ accounts and improve the user experience for your app, website, or e-commerce, business, consider implementing an IP service to do so today.

5/5 stars (5 votes)

Elizabeth (Lizzie) Shipton
Lizzie Shipton is an adept Full Stack Developer, skilled in JavaScript, React, Node.js, and GraphQL, with a talent for creating scalable, seamless web applications. Her expertise spans both frontend and backend development, ensuring innovative and efficient solutions.
Get your free
IP Geolocation API
key now
Enhance your fraud prevention strategy effortlessly! Try Abstract's IP Geolocation API today to add a robust layer of security to your online services and ensure the safety of your users' sensitive data. Experience the power of accurate geolocation in safeguarding against fraud.
get started for free

Related Articles

Get your free
IP Geolocation API
key now
4.8 from 1,863 votes
See why the best developers build on Abstract
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
No credit card required