Ali Khallad

carticy

Checkout Shield stops fake checkout orders and card testing attacks — the kind that bypass your CAPTCHA.
Card testing bots don’t fill out your checkout form. They hit your store’s checkout API directly, completely skipping any reCAPTCHA or hCaptcha you’ve set up. That’s why CAPTCHA alone doesn’t stop them.
This plugin verifies that every checkout request comes from a real browser session. Bots that can’t prove they loaded your checkout page get blocked before WooCommerce processes the order.
<h4>Why Store Owners Choose This Plugin</h4>
<ul>
<li>Catches what CAPTCHA misses — blocks bots hitting your checkout API directly</li>
<li>Works with any caching — LiteSpeed, Cloudflare, WP Rocket, W3TC — no conflicts</li>
<li>Zero configuration — activate and you’re protected</li>
<li>No external services — everything runs on your server, no subscriptions</li>
<li>No performance impact — validation adds microseconds, not seconds</li>
</ul>
<h4>Features (Free)</h4>
<ul>
<li>Automatic bot blocking — works the moment you activate, no setup needed</li>
<li>4 protection levels — Learning, Permissive, Balanced, and Strict — choose how aggressive you want to be</li>
<li>Dashboard overview — see blocked vs verified orders at a glance with a 7-day chart</li>
<li>Order status tracking — know which orders were flagged, passed, or blocked</li>
<li>IP whitelist — let trusted addresses through, supports CIDR notation</li>
<li>API key authentication — for headless and custom checkout setups</li>
<li>Works with all checkout types — classic, block-based, and all payment gateways</li>
<li>HPOS compatible — works with High-Performance Order Storage</li>
<li>WooCommerce logging — full integration with WooCommerce Status logs</li>
</ul>
<h4>Pro Features</h4>
Take control with advanced tools:
<ul>
<li>3-level logging control — turn logging off, log blocked attempts only, or log everything</li>
<li>Recent blocks feed — last 50 blocked attempts on your dashboard with email, payment method, and reason</li>
<li>Automatic CDN/proxy detection — identifies real visitor IPs behind Cloudflare, Sucuri, or Akamai</li>
<li>Stronger permissive mode — tighter bot detection with referrer verification</li>
<li>Checkout details in logs — see which email and payment method bots tried to use</li>
<li>Customer blocklist — block repeat offenders by email, name, address, phone, IP, or postal code</li>
<li>One-click order blocking — block a customer directly from any order screen</li>
</ul>
<a href="https://carticy.com/plugins/checkout-shield-for-woocommerce/" rel="nofollow ugc">Learn more about Pro features</a>

Checkout Shield for WooCommerce – Stop Fake Orders, Spam Bots & Card Testing

Stops fake checkout orders, card testing attacks, and spam bots that bypass CAPTCHA. Works instantly with all checkout types.

The Plugin Forge

Fake COD orders costing your store money?
Returned shipments, wasted delivery costs, inventory stuck in transit — this plugin stops fraud at checkout before a single penny is spent on shipping.
Built by <a href="https://thepluginforge.com" rel="nofollow ugc">The Plugin Forge</a>.
<h3>What It Does</h3>
Visual Rule Builder — Create rules to block or allow COD based on conditions like cart value, country, state, postal code, schedule, user role, product, category, coupon, or weight. No code needed.
OTP Phone Verification — Customers verify their phone number via SMS before placing a COD order. Supports Twilio, Vonage, and custom webhooks.
Auto-Blacklist — Automatically blocks customers who exceed a set number of failed deliveries or cancellations.
Manual Blacklist — Block any email or phone number with one click.
Fraud Logs — Every blocked attempt is logged with full detail — who, what, where, and why.
Test Simulator — Test your rules against any scenario before going live.
Admin Approval — Hold suspicious orders for manual review.
Fraud Heatmap — See where COD fraud is coming from geographically.
<h3>How Rules Work</h3>
Go to WooCommerce → Smart COD Control → COD Rules.
<ol>
<li>Click Add New Rule (or pick a quick-start preset)</li>
<li>Choose action: Block COD when conditions match, or Allow COD only when conditions match</li>
<li>Choose match mode: All conditions must match (AND), or any one condition (OR)</li>
<li>Add conditions and save</li>
</ol>
Rules are evaluated at checkout in order. If no rules exist, COD is available to everyone.
Built and maintained by <a href="https://thepluginforge.com" rel="nofollow ugc">The Plugin Forge</a>.
<h3>Privacy</h3>
<ul>
<li>Blocked order data (email, phone, IP, location, reason) is stored in your WordPress database only</li>
<li>OTP SMS is sent via your chosen provider — no data goes to The Plugin Forge</li>
<li>Review notice stores plugin install date and dismissal state in <code>wp_options</code> — no data sent externally</li>
<li>Deactivation survey: if you choose to submit feedback, the selected reason, optional details, plugin version, WordPress version, WooCommerce version, and your site URL are sent to The Plugin Forge (thepluginforge.com) to help improve the plugin. Clicking “Skip & Deactivate” sends nothing.</li>
<li>No external tracking, no cookies, no analytics</li>
<li>All data permanently deleted on plugin removal via uninstall.php</li>
</ul>

Smart Cash on Delivery Fraud Blocker & OTP Verification for WooCommerce

Stop fake COD orders before they ship. Smart rules, OTP phone verification, and fraud analytics — all in one plugin.

Checkout Shield for WooCommerce – Stop Fake Orders, Spam Bots & Card Testing vs Smart Cash on Delivery Fraud Blocker & OTP Verification for WooCommerce