Thank you SO much.
That was an unnecessary nightmare.
I do think it worth your while, however, somehow incorporating the facility for a captcha button into eCart if at all possible.
I took your message about the Fraud Detection Suite directly to authorize.net. I then sent the transcript of my discussion with that agent across to TSYS who manage the payment gateway.
It was an overzealous "Senior Risk Assessor" at TSYS who I think doesn't know a lot about either programming or computers.
The authorize.net agent recommended that I disable the filters the Senior Risk Assessor had asked me to put in place.
When that company read the transcript, they authorized me to disable them.
The good part is that I now have it in writing from both authorize.net and TSYS that I should disable those filters. Authorize.net confirmed that the only thing I really needed was the captcha. So I am covered in any future phishing attempts. What a completely unnecessary excursion into futility that was.
I have, however, left a couple of transaction volume filters in place. I have set a limit for 10 transactions in an hour, and 25 transactions in a day. I have never had that many. I have also set the filters for "process and inform", which I have checked is OK.
But thank you so very much for your diligence and help and support. Without it, they would all right now be telling me that it is my fault, when it was clearly not.
Thank you so much again,