TivroKYC - KYC & Fraud Protection

TivroKYC is a complete KYC (Know Your Customer) identity verification and fraud protection addon for WHMCS. It lets you collect and review client identity documents, automatically hold or suspend services until verification is approved, and block unverified clients from placing orders. Built-in risk scoring flags suspicious accounts based on IP, VPN/proxy usage, and high-risk countries, while a rules engine lets you set custom conditions per product, country, or client group.

About This Product

Features

📄 Document Collection & Verification

✓ Configurable document groups (identity, address, etc.) with individual enable/disable control
✓ Per-group mandatory or optional setting
✓ Clients choose one document type per group from admin-enabled types
✓ Custom labels per document type shown to the client
✓ File upload support: JPEG, PNG, WebP, PDF (up to 10MB)
✓ Secure document viewing via tokenised URLs — documents are never publicly accessible

🔄 KYC Statuses & Lifecycle

✓ Six statuses tracked: None, Pending, Under Review, Rejected, Approved, Expired
✓ Configurable KYC validity period in days — approvals auto-expire via daily cron
✓ Configurable grace period before expired KYC triggers action
✓ Clients can resubmit documents after rejection

⚙️ Automatic Service Control

✓ Automatically holds services, domains, and addons when KYC is missing or pending
✓ Automatically suspends services, domains, and addons when KYC is rejected
✓ Automatically activates services (runs ModuleCreate or ModuleUnsuspend) when KYC is approved
✓ Covers hosting services, service addons, and domains independently
✓ Optional setting to hold services while documents are under review, not just on rejection
✓ Prevents bypassing KYC via manual admin unsuspend or status change to Active

🛒 Order & Checkout Control

✓ Block checkout entirely until KYC is approved (configurable toggle)
✓ Apply KYC requirement to all products or specific product IDs only
✓ Cart validation fires before payment with a direct link to the KYC upload page

📋 Rules Engine

✓ Create custom rules with multiple conditions and actions
✓ Condition fields: product ID, order amount, client country, risk level, client group, new client flag
✓ Operators: equals, not equals, greater than, less than, contains, in list
✓ Priority ordering and enable/disable toggle per rule
✓ Trigger count tracked per rule

🛡️ Risk Scoring Engine

✓ Automatic risk score calculated per client on submission
✓ Risk factors: multiple accounts from same IP, IP/country mismatch, proxy detected, VPN detected, high-risk country
✓ Risk levels: Low, Medium, High, Critical based on total score
✓ 30+ high-risk countries pre-configured
✓ Risk scores stored and visible in the admin panel per client

🖥️ Admin Panel

✓ Dashboard with total, pending, approved, and rejected verification counts
✓ 6-month chart of approvals, rejections, and pending submissions
✓ Recent verifications list and high-risk clients panel
✓ Full client list with KYC status per client
✓ Verification detail view with document preview and one-click approve/reject
✓ Recent activity log

📊 Reporting

✓ Overview report: daily breakdown of total, approved, rejected, and pending
✓ Approval rate percentage and average approval time in hours
✓ Risk distribution report and country report
✓ Configurable date range (default 30 days)

📧 Email Notifications

✓ Automated emails to clients on: submitted, approved, rejected, expired, and verification required events
✓ Uses WHMCS SendEmail API with automatic fallback to PHP mail()

👤 Client Area

✓ Document upload page, status page, submission confirmation, and verification history
✓ KYC module hidden from primary client navigation
✓ Animated status banner on the client dashboard showing context-aware message per status: action required, under review, rejected, or expired

💾 Data & Backup

✓ Full database backup downloadable by admin as a SQL file
✓ Clean deactivation: drops all tables and deletes all uploaded files from disk