Ali Khallad

carticy

Checkout Shield stops fake checkout orders and card testing attacks — the kind that bypass your CAPTCHA.
Card testing bots don’t fill out your checkout form. They hit your store’s checkout API directly, completely skipping any reCAPTCHA or hCaptcha you’ve set up. That’s why CAPTCHA alone doesn’t stop them.
This plugin verifies that every checkout request comes from a real browser session. Bots that can’t prove they loaded your checkout page get blocked before WooCommerce processes the order.
<h4>Why Store Owners Choose This Plugin</h4>
<ul>
<li>Catches what CAPTCHA misses — blocks bots hitting your checkout API directly</li>
<li>Works with any caching — LiteSpeed, Cloudflare, WP Rocket, W3TC — no conflicts</li>
<li>Zero configuration — activate and you’re protected</li>
<li>No external services — everything runs on your server, no subscriptions</li>
<li>No performance impact — validation adds microseconds, not seconds</li>
</ul>
<h4>Features (Free)</h4>
<ul>
<li>Automatic bot blocking — works the moment you activate, no setup needed</li>
<li>4 protection levels — Learning, Permissive, Balanced, and Strict — choose how aggressive you want to be</li>
<li>Dashboard overview — see blocked vs verified orders at a glance with a 7-day chart</li>
<li>Order status tracking — know which orders were flagged, passed, or blocked</li>
<li>IP whitelist — let trusted addresses through, supports CIDR notation</li>
<li>API key authentication — for headless and custom checkout setups</li>
<li>Works with all checkout types — classic, block-based, and all payment gateways</li>
<li>HPOS compatible — works with High-Performance Order Storage</li>
<li>WooCommerce logging — full integration with WooCommerce Status logs</li>
</ul>
<h4>Pro Features</h4>
Take control with advanced tools:
<ul>
<li>3-level logging control — turn logging off, log blocked attempts only, or log everything</li>
<li>Recent blocks feed — last 50 blocked attempts on your dashboard with email, payment method, and reason</li>
<li>Automatic CDN/proxy detection — identifies real visitor IPs behind Cloudflare, Sucuri, or Akamai</li>
<li>Stronger permissive mode — tighter bot detection with referrer verification</li>
<li>Checkout details in logs — see which email and payment method bots tried to use</li>
<li>Customer blocklist — block repeat offenders by email, name, address, phone, IP, or postal code</li>
<li>One-click order blocking — block a customer directly from any order screen</li>
</ul>
<a href="https://carticy.com/plugins/checkout-shield-for-woocommerce/" rel="nofollow ugc">Learn more about Pro features</a>

Checkout Shield for WooCommerce – Stop Fake Orders, Spam Bots & Card Testing

Stops fake checkout orders, card testing attacks, and spam bots that bypass CAPTCHA. Works instantly with all checkout types.

zipnom

CODShield AI helps WooCommerce stores reduce fake Cash on Delivery (COD) orders and RTO losses. It can verify suspicious orders over WhatsApp (free, single built-in message) and optionally via Voice IVR calls (PRO). You also get an Analytics area to track confirmations, risk distribution, and performance over time, plus an Orders Details table with filters and CSV export.
<blockquote>
Note: “WhatsApp” is a trademark of Meta Platforms, Inc. This plugin is not affiliated with or endorsed by WhatsApp/Meta.
</blockquote>
<h3>Key Features</h3>
<ul>
<li>
Cash On Delivery Fraud Shield – Powered by AI
<ul>
<li>Basic risk checks in free plugin; works with your COD flow.</li>
<li>Auto-hold or flag risky COD orders before fulfillment.</li>
<li>Clear audit trail via WooCommerce order notes.</li>
</ul>
</li>
<li>
WhatsApp Order Confirmation
<ul>
<li>Sends a message after order creation with Confirm / Cancel links.</li>
<li>Uses a single built-in message (no custom/multi templates in this version).</li>
<li>Order status/notes update automatically on customer action.</li>
</ul>
</li>
<li>
Voice IVR Order Confirmation (PRO)
<ul>
<li>Automated phone call asks the buyer to confirm/cancel via keypad.</li>
<li>Real-time callback updates the WooCommerce order.</li>
</ul>
</li>
<li>
Analytics Dashboard
<ul>
<li>Orders & Revenue Trend bar chart.</li>
<li>Fraud Risk Distribution donut (Legitimate, Low/Medium/High risk, Blocked).</li>
<li>WhatsApp & Confirmation Analytics cards (messages sent, confirmed, not confirmed, fraud detected/reported).</li>
<li>Date range selector and quick “7 Days” preset.</li>
</ul>
</li>
<li>
Orders Details
<ul>
<li>Search bar + filters (Status, WhatsApp, Voice Calls, Scores, Orders).</li>
<li>Columns: Order #, Date, Customer, Status, Total, WhatsApp, Voice Call, Fraud Score, Admin Reported.</li>
<li>Export Orders to CSV.</li>
</ul>
</li>
<li>
License & Store
<ul>
<li>Enter license key and store ID; see active/expired status and time remaining.</li>
</ul>
</li>
<li>
Modules (Add-ons)
<ul>
<li>Manage installed modules and browse extensions (if enabled in your account).</li>
</ul>
</li>
</ul>
<h3>How It Works</h3>
<ol>
<li>Customer places a COD order.</li>
<li>Plugin runs risk checks and, when required:
<ul>
<li>Free: sends WhatsApp confirmation (single built-in message).</li>
<li>PRO: may trigger a Voice IVR call if messages fail or are ignored.</li>
</ul>
</li>
<li>Customer confirms/cancels; the plugin updates order notes/status accordingly.</li>
<li>View overall performance in Analytics and drill into Orders Details.</li>
</ol>
<h3>Free vs PRO</h3>
<ul>
<li>Free: AI-gated COD checks, WhatsApp confirmation (single built-in message), order notes, Analytics (trends, risk distribution), Orders Details with filters + CSV export, License screen.</li>
<li>PRO: Adds Voice IVR confirmation and advanced options controlled by your CODShield AI account.</li>
</ul>
<h3>Usage</h3>
<ul>
<li>WhatsApp Message: One built-in template that includes order reference + your store/site name, with Confirm / Cancel links. (Custom or multiple templates are not available yet.)</li>
<li>Recommended flow: Keep new COD orders On hold until confirmed; move to Processing after confirmation.</li>
</ul>
<h3>Privacy</h3>
This plugin can connect to an external service (your configured CODShield AI backend / messaging or IVR provider) to perform AI risk checks, send WhatsApp messages, and/or place IVR calls. 
Data potentially transmitted: order ID, order total, COD/payment method, customer name, phone number, and confirmation URLs. 
Purpose: verify buyer intent and reduce COD fraud/RTO. 
Retention: depends on your provider; review their policy. 
Consent: disclose verification via WhatsApp/IVR in your store policies and ensure a lawful basis for processing phone numbers for fraud prevention.
<h3>External Services</h3>
<ul>
<li>CODShield AI Cloud / Messaging & IVR Provider – used for risk scoring, WhatsApp delivery, and IVR calls when enabled. You control the endpoint/keys in plugin settings.</li>
</ul>
<h3>Support</h3>
<ul>
<li>Use the Support tab on the plugin page for community help.</li>
<li>PRO license/account issues: contact your CODShield AI support channel.</li>
</ul>

CODShield AI – Cash on Delivery (COD) Fraud Shield

Prevent fake COD orders with WhatsApp confirmations, fraud checks, and smart automation to reduce RTO and cancellations.

Checkout Shield for WooCommerce – Stop Fake Orders, Spam Bots & Card Testing vs CODShield AI – Cash on Delivery (COD) Fraud Shield