We recently opened up shipping internationally through out Netsuite webstore.  We've had a few painful fraud losses that have caused us to tighten up our int'l order review.  In the worst case, we had a few shipments to Israel that were using stolen AMEX cards.  The bill-to, ship-to and cardholder name were all the same in Netsuite....but if we'd have checked the IP address we'd have seen it was in Germany.

Looking for feedback from anyone with other best practices.  Our internal validation rules include:

1) Must have valid email address that doesn't bounce upon order confirmation email.
2) Bill-to and Ship-to name & address must be same and match the Name on the credit card payment tab.