Quick Answer
Proxy and VPN clustering usually means too many transactions are arriving from obscured or non-standard network paths. That weakens confidence in location, identity, and genuine purchase intent.
What Stripe Is Likely Comparing
- proxy or VPN share vs historical baseline
- fraud outcomes for obscured-network traffic
- overlap with device, decline, and challenge anomalies
Most Common Root Causes
- attack traffic masking origin
- risky acquisition channels
- legitimate cross-border behavior not segmented properly
Evidence Stripe Will Weight Most
- proxy/VPN rate by traffic source
- approval, fraud, and dispute outcomes for that cohort
- controls applied to obscured-network traffic
Operational Fix Sequence
- Segment obscured-network traffic.
- Apply stronger checks only to that cohort.
- Separate bad traffic from legitimate privacy-tool users.