Skip to content

Understanding Risk Scores

The IP Risk Score measures how likely an IP address is to be associated with fraudulent or suspicious activity.

MIDA calculates this score using multiple security signals to help you determine whether a visitor should be allowed or blocked.


Every visitor is assigned an IP Risk Score between 0 and 100.

Risk ScoreRisk Level
0 – 30Low Risk
31 – 70Medium Risk
71 – 100High Risk

Higher scores indicate a greater likelihood that the visitor is using anonymous networks or has been associated with suspicious activity.


MIDA evaluates multiple security signals when calculating an IP Risk Score, including:

  • VPN usage
  • Proxy usage
  • TOR network usage
  • Global IP blacklists
  • Malicious network reputation
  • Hosting provider detection
  • Other fraud and anonymity indicators

These signals are continuously analyzed to provide an accurate assessment of each visitor’s risk level.


You can configure the IP Risk Score Threshold in Advanced Settings.

This threshold determines the minimum score required before MIDA automatically blocks a visitor.

  • A lower threshold provides stronger protection by blocking more suspicious traffic, but it may increase false positives.
  • A higher threshold is less aggressive and reduces the chance of blocking legitimate customers.

Choose the threshold that best matches your store’s risk tolerance.


The configured Risk Score Threshold is automatically used by MIDA’s preset Protection Modes.

  • Balanced Mode uses a higher threshold to minimize the impact on legitimate customers while still blocking suspicious traffic.
  • Strict Mode uses a lower threshold to aggressively block high-risk visitors and provide stronger protection.

If you need more control, you can customize the threshold manually in Advanced Settings.


If you have any questions, feel free to contact us via Crisp Chat or email us at [email protected].