Hi Nikolay,
Thank you for your question.
A quick reply to your suggestion: this kind of rules might be really inappropriate, when your customer from Florida is placing an order while travelling in Texas. Same if using IP addresses at country level.
Fraud prevention and protection for online payment is vast topic, and I only know part of it. Also payment processors like Stripe (and your bank as well) are in the best position to prevent fraud.
It is an ongoing process, and rules and methods are evolving with new fraud attempts. They also tend to be kept secret, to avoid being worked around too soon by fraudsters.
You should check what is already in place in your Stripe.com account.
Also I would suggest reading Stripe's new set of tools
Radar https://stripe.com/docs/radar
Since the beginning of this VM plugin code, that's the billing the Billing name and address, in VirtueMart checkout, that is sent for payment processing. CVC and address zip checks were already available for a while now in Stripe.com.
Finally, if there is some feature requests for specific fraud prevention options, I will of course consider them. But you are the first one to point at this one for the moment.
Kind regards,
Hervé