Naimur Rahman Nahid

<p><strong>Naimur Email OTP Verification for WooCommerce</strong> verifies customer email ownership using a One Time Password (OTP) before account creation. Optional Google reCAPTCHA, email logs, activity tracking, and a responsive OTP modal are included.</p>
<p>This plugin verifies users through a unique OTP sent to their email during:<br />
– Login<br />
– Registration</p>
<h3>Documentation</h3>
<p>Full documentation for setup, usage, and customization is available here:<br />
👉 <strong>https://naimurrahmannahid.com/naimur-otp-plugin/</strong></p>
<h3>Video Tutorial</h3>
<span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/AehMWNLxkVk?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span>
<h3>🔥 Key Features</h3>
<ul>
<li>Email-Based OTP Verification  </li>
<li>Instant OTP Delivery  </li>
<li>OTP for Login, Register & Checkout  </li>
<li>Smart OTP Input UI  </li>
<li>Custom Email Templates  </li>
<li>Secure & Anti-Spam Protection  </li>
</ul>
<h3>Additional Features</h3>
<ul>
<li>OTP expiry control  </li>
<li>Resend button with countdown  </li>
<li>AJAX-based OTP submit  </li>
<li>Google reCAPTCHA v2  </li>
<li>Custom error/success messages  </li>
<li>Translation-ready  </li>
<li>Developer-friendly hooks</li>
</ul>
<h3>External services</h3>
<p>This plugin can optionally integrate with Google reCAPTCHA to protect the WooCommerce login and registration forms from automated abuse and spam.</p>
<p>When reCAPTCHA is enabled in the plugin settings and you configure a site key and secret key, the following data is sent to Google:</p>
<ul>
<li>The reCAPTCHA response token generated in the browser</li>
<li>The IP address of the user</li>
<li>Additional browser and usage information collected by the reCAPTCHA widget</li>
</ul>
<p>This data is sent when the WooCommerce login or registration form is submitted in order to verify that the request is made by a human user.</p>
<p>Service provider:<br />
* Google reCAPTCHA – provided by Google LLC<br />
* Terms of Service: https://www.google.com/recaptcha/terms<br />
* Privacy Policy: https://policies.google.com/privacy</p>
<h3>Source code</h3>
<p>The JavaScript file <code>assets/js/main.js</code> is a compiled/optimized build used in production.</p>
<p>A human-readable source version of this script is bundled with the plugin under:</p>
<ul>
<li><code>assets/src/js/main.js</code></li>
</ul>
<p>This file contains the original source code that can be viewed, studied and modified by developers.</p>


Naimur Email OTP Verification for WooCommerce

Short Description: Verify WooCommerce customer email addresses with a 6-digit OTP before account creation for secure and spam-free registrations.

dillilabs

<p>This plugin integrates with the Dilli Email Validation API (DEVA) to block fake or incorrectly formatted email addresses at form submission, ensuring higher-quality leads and significantly reducing spam.</p>
<p>This plugin requires an API Key which can be obtained for FREE by <a href="https://deva.dillilabs.com/register" rel="nofollow ugc">signing up here</a>. Learn more about Dilli Email Validation API <a href="https://www.dillilabs.com/products/email-validation-api/" rel="nofollow ugc">here</a>.</p>
<p>This plugin hooks directly into the WordPress core email validation function (<code>is_email()</code>), which is used by most major form plugins. That means it works out of the box with popular form builders like:</p>
<ul>
<li>Contact Form 7</li>
<li>WPForms</li>
<li>Gravity Forms</li>
<li>Ninja Forms</li>
<li>Jetpack/Grunion contact forms</li>
<li>WordPress registration forms</li>
<li>and many others.</li>
</ul>
<p>No need to modify your forms — just install and activate the plugin.</p>
<h4>Features</h4>
<ul>
<li>Validates email address format. Ex: email address <code>fooAtdillilabs.com</code> is invalid because of missing ‘@’</li>
<li>Checks for existence of MX records of the email address domain. Ex: <code>foobar@dlfkdlfkf.co</code> is invalid because no MX records exist for domain dlfkdlfkf.co.</li>
<li>Checks for Disposable/Temporary email addresses. Ex: user@mailinator.com is invalid because mailinator.com provides temporary shared temporary email inboxes.</li>
<li>Checks for conformity with ESP (Email Service Provider) grammar rules. Ex: <code>bob@yahoo.com</code> is invalid because Yahoo does not allow user part (<code>bob</code> in this case) to be less than 4 characters.</li>
<li>Checks for profanity in user part of email address. Ex: <code>f***you@gmail.com</code> is invalid.</li>
<li>Checks user and domain parts of an email address for known malicious patterns. Ex: <code>jondoe@gmail.com</code>, <code>foobar@yahoo.com</code>, <code>idontwanttogive@gmail.com</code> and <code>noemail@gmail.com</code> will be treated as invalid.</li>
<li>Checks email address domain against a known blacklist.</li>
<li>Checks email address against a known blacklist of frequently used email addresses for spam.</li>
<li>Checks for reserved domains. Ex: example.com is a reserved domain. Therefore, validemail@example.com is not allowed.</li>
<li>Checks for Role-based email addresses. Ex: info@someorganization.com will be treated as invalid.</li>
<li>Checks for safe domains. Restricts emails whose domains represents sites with adult content.</li>
<li>Checks for non-business email address.  Ex: *@gmail.com, *@yahoo.com, *@hotmail.com email addresses will be treated as invalid.</li>
<li>Checks the IP address of the user submitting the form against a known list of malicious IP addresses.</li>
<li>Add custom blocklist. You may request certain domains, emails and users to be blocked. </li>
</ul>
<h4>Available Languages</h4>
<ul>
<li>English</li>
<li>German (Deutsche)</li>
</ul>


Dilli Email Validator

Using the free 100 validation took 5 minutes having 10 logins only on my site.
Each login (not registration! login!!!) used 5 validations. I see no sense in validating logins (well, it makes sense for the provider asking 0.5 cents per validation). Even my admin user's (already logged in) ajax calls were validated each time.

And the worst is that it blocked valid users logging in with an email address from free email providers (not disposable).


BIG waste of money

Validates email addresses in real-time and blocks form submissions with invalid or fake emails. Reduce spam, fix typos, and capture quality leads.

Naimur Email OTP Verification for WooCommerce vs Dilli Email Validator