A Developer's Guide to Blocking Fraud Threats