<ul class="wccom-tick-list-primary">
<li>Set custom risk scoring rules based on order behavior, IP location, and customer details</li>
<li>Assign individual weights (0–10) to each rule to calculate a dynamic risk percentage per order</li>
<li>Enable or disable specific risk conditions like first-time buyer, high-risk countries, or billing/shipping mismatch</li>
<li>Blacklist fraudulent orders by email, domain, IP address, phone number, country, state, or zip code</li>
<li>Restrict orders from specific user roles, proxy users, or previously flagged addresses</li>
<li>Customize the error message shown to blocked customers during checkout</li>
<li>Whitelist trusted customers by email, domain, IP address, payment method, or shipping region</li>
<li>Whitelist overrides blacklist to ensure smooth ordering for safe users</li>
<li>View calculated risk score directly inside the WooCommerce order detail page for transparency</li>
<li>Detect and block bulk bot orders or repeated transactions from the same customer</li>
<li>Supports all WooCommerce payment gateways and shipping methods out of the box</li>
<li>Lightweight, fast, and designed to run fraud checks without affecting checkout performance</li>
</ul>
<hr class="wccom-product-single__section-hr" />
<h2>Why Anti-Fraud Protection Is Essential for WooCommerce Stores</h2>
Running an online store today means more than just selling products—it also means defending your business against the growing threat of digital fraud. With online transactions increasing, fraudsters have become smarter, targeting vulnerable WooCommerce stores with fake orders, stolen credit cards, and automated attacks. What may seem like a single suspicious order could actually be part of a larger fraud pattern designed to exploit your store’s checkout process.
Every unauthorized transaction not only chips away at your revenue but also burdens you with refund requests, chargeback penalties, and customer trust issues. If left unchecked, these risks can snowball into serious operational damage.
Anti-Fraud Protection for WooCommerce offers a powerful, easy-to-use solution to detect and stop fraudulent behavior before it affects your bottom line. Whether it’s blocking high-risk IPs, preventing bulk bot checkouts, or detecting mismatches between customer details and locations, this plugin gives you complete control to define what’s risky—and what’s not.
From solo entrepreneurs to high-volume stores, this tool is especially useful during:
<ul>
<li>Product launches or holiday sales—when fraud attempts spike</li>
<li>Accepting international orders or unfamiliar payment methods</li>
<li>Detecting rapid order frequency from the same user or region</li>
<li>Blocking suspicious email domains or repeat offenders</li>
</ul>
<h2>Benefits</h2>
<h3>Risk Score Rules – Dynamic Fraud Risk Evaluation</h3>
These features in Anti Fraud Protection plugin allow you to intelligently analyze and score orders based on custom-defined conditions. Each rule can be toggled on/off and assigned a weight from 0–10, contributing to a final risk percentage per order.
<figure id="attachment_18734005209130" aria-describedby="caption-attachment-18734005209130" style="width: 495px" class="wp-caption alignnone"><img class="wp-image-18734005209130 size-medium" title="Risk analysis of fraud detection score" src="https://woocommerce.com/wp-content/uploads/2025/04/risk-analysis.png?w=495" alt="Fraud real time Risk Analysis" width="495" height="590" /><figcaption id="caption-attachment-18734005209130" class="wp-caption-text">Fraud protection risk analysis</figcaption></figure>
<h4>Detailed Features:</h4>
<ul class="">
<li>First-Time Order Detection: Flag orders placed by new customers with no previous order history.</li>
<li>Billing and Shipping Address Mismatch: Detect when billing and shipping details don’t align—a common fraud signal.</li>
<li>IP Country vs Billing Country Mismatch: Compare geolocation from IP with billing country for suspicious differences.</li>
<li>IP Country vs Shipping Country Mismatch: Flag orders where the shipping country doesn’t match IP location.</li>
<li>International Order Flag: Automatically tag cross-border orders that may carry a higher fraud risk.</li>
<li>High-Risk Email Domain Detection: Block orders using throwaway or temporary email domains.</li>
<li>High-Risk Countries Filter: Mark specific countries as high risk and evaluate accordingly.</li>
<li>Order Amount Threshold Check: Add risk weight to high-value purchases exceeding a set amount.</li>
<li>Custom Risk Scoring: Assign weights to rules (0–10) to build a dynamic total risk percentage.</li>
<li>Order Risk Score Display: See risk scores in real-time on the WooCommerce order detail page.</li>
</ul>
<figure id="attachment_18734005209093" aria-describedby="caption-attachment-18734005209093" style="width: 896px" class="wp-caption alignnone"><img class="wp-image-18734005209093 size-medium" title="Configure rules to prevent card testing attacks and velocity attacks and prevent block fake orders" src="https://woocommerce.com/wp-content/uploads/2025/04/WooCommerce-settings_ca83fd.png?w=896" alt="Fraud protection rules" width="896" height="1293" /><figcaption id="caption-attachment-18734005209093" class="wp-caption-text">Configure rules to detect block fake orders.</figcaption></figure>
<h3>Blacklist System – Block Suspicious Customers Automatically</h3>
With Anti Fraud Protection Plugin stop fraudulent transactions before they happen by blacklisting emails, IPs, and shipping regions. This feature provides instant order blocking for high-risk criteria.
<ul class="">
<li>Block Specific Email Addresses: Manually block known fraudulent email accounts.</li>
<li>Block Email Domains: Prevent entire domains like <code>tempmail.com</code> from placing orders.</li>
<li>Phone Number Blocking: Restrict transactions from suspicious or spam phone numbers.</li>
<li>IP Address Blocking: Add single or multiple IPs to the blacklist to prevent future orders.</li>
<li>IP Country Blocking: Restrict orders from high-risk countries based on geolocation.</li>
<li>User Role Restrictions: Block roles like Guest, Subscriber, or custom roles from ordering.</li>
<li>Shipping Address Blocking: Identify and stop orders going to fraudulent addresses.</li>
<li>Block Shipping Country, State, or Zip Code: Deny orders from flagged locations to prevent repeat fraud.</li>
<li>Customizable Error Messages: Show a tailored checkout message when an order is blocked.</li>
</ul>
<figure id="attachment_18734005209091" aria-describedby="caption-attachment-18734005209091" style="width: 896px" class="wp-caption alignnone"><img class="wp-image-18734005209091 size-medium" title="Rule to configure blacklisting settings to protect site from fraud orders" src="https://woocommerce.com/wp-content/uploads/2025/04/blacklist-order-settings_caa1c0.png?w=896" alt="Black list orders and users" width="896" height="775" /><figcaption id="caption-attachment-18734005209091" class="wp-caption-text">Black list specific orders to prevent fake orders and minimize card testing attacks.</figcaption></figure>
<h3>Whitelist System – Allow Trusted Users to Bypass Anti Fraud Checks</h3>
Ensure seamless transactions for VIPs, employees, or trusted clients. Whitelisted users always bypass Anti Fraud filters, even if other conditions are met.
<ul class="">
<li>Whitelist Specific Email Addresses: Allow select users to order even if domain is blocked.</li>
<li>Whitelist Email Domains: Trust domains like <code>@yourcompany.com</code> to ensure easy ordering.</li>
<li>Whitelist IP Addresses: Permit known IPs from your office, team, or partners to always succeed.</li>
<li>Whitelist User Roles: Automatically allow orders from Admins, Shop Managers, or other trusted roles.</li>
<li>Whitelist Payment Methods: Trust secure gateways like Stripe or verified bank transfers.</li>
<li>Whitelist Shipping Locations: Allow safe zip codes, countries, and states without triggering blocks.</li>
</ul>
<figure id="attachment_18734005209089" aria-describedby="caption-attachment-18734005209089" style="width: 896px" class="wp-caption alignnone"><img class="wp-image-18734005209089 size-medium" src="https://woocommerce.com/wp-content/uploads/2025/04/whitelist-settings_3a7b6e.png?w=896" alt="whitelist specific orders from being marked as fake orders." width="896" height="532" /><figcaption id="caption-attachment-18734005209089" class="wp-caption-text">Configure whitelisting settings to prevent order marked as fake order</figcaption></figure>

Anti Fraud Protection

Anti-Fraud Protection automatically detects and blocks fraudulent orders using customizable rules, ensuring secure transactions and reducing chargebacks

<blockquote>
<h1 style="text-align: center">Protect Your Site With reCaptcha</h1>
</blockquote>
With the WooCommerce reCaptcha extension, you can add Google reCaptcha to WordPress and WooCommerce login, registration, password pages, checkout, comments, and more. You can also add reCaptcha on any page using the shortcode. The extension supports v2 and v3 versions of Google Invisible captcha.
With increased spam and hacking attempts, the extension can act as an extra security gate to block bot traffic from making login attempts, checkouts, card checking, password resets, spam comments, and more. 
By using the invisible reCaptcha v3 version, you ensure that the captcha only appears to suspicious visitors and remains hidden from your valuable and real customers. You can also customize the spam score of V3 reCaptcha as per your website’s needs.
<div class="woo-sc-box normal" style="text-align: center;background-color: #ffc4bd">Attention! 
To prevent your WooCommerce stores from the ongoing surge in carding attacks and fraudulent transactions, it is highly advised to use <a href="https://woocommerce.com/products/anti-fraud-shield-for-woocommerce/">Anti-Fraud Shield</a> in Combination with <a href="https://woocommerce.com/products/google-recaptcha-for-woocommerce/">Google reCaptcha for WooCommerce</a>.</div>
<img class="alignnone size-full wp-image-18734004579813" src="https://woocommerce.com/wp-content/uploads/2021/03/bnr.jpg" alt="google recaptcha for woocommerce" width="901" height="105" />
<h2>Now with Checkout Rate Lmiter – Ultimate Solution for Carding Attacks (New)</h2>
Limit manual carding testing attacks in your WooCommerce store using checkout rate-limiting technology. While reCaptcha stops bot-based carding attempts by recognizing the repeating patterns, the rate limiter will now complement reCaptcha by restricting users from making multiple checkout attempts within a specified period. This makes Google reCaptcha for WooCommerce the ultimate solution for all sorts of carding attempts. With the checkout rate limiter’s enhanced settings, you can:
<ul>
<li>Add rate limiter limits</li>
<li>Add time for which the place order button will be disabled when all attempts are exhausted</li>
<li>Add an error message to show when the rate limiter is triggered</li>
<li>Add IPs for which rate limiter will be disabled</li>
<li>Add IPs for which the place order button will be disabled</li>
<li>Add emails for which the place order button will be disbaled</li>
<li>Add user roles for which rate limiter will be disabled</li>
</ul>
<img class="alignnone size-full wp-image-18734004977215" src="https://woocommerce.com/wp-content/uploads/2021/03/recaptcha-for-woocommerce-129865.png" alt="recaptcha for woocommerce" width="980" height="575" />
<h2>Features of WooCommerce reCaptcha:</h2>
<ul>
<li style="list-style-type: none">
<ul>
<li style="font-weight: 400">Supports v2 and v3 versions</li>
<li style="font-weight: 400">Activate reCaptcha individually on certain pages</li>
<li style="font-weight: 400">Customize reCaptcha sizes</li>
<li style="font-weight: 400">Choose between dark and light reCaptcha themes</li>
<li style="font-weight: 400">Disable reCaptcha for specific countries</li>
<li style="font-weight: 400">Excludes a specific IP range</li>
<li style="font-weight: 400">Add reCaptcha anywhere using shortcode</li>
<li style="font-weight: 400">Customize spam score for V3 recaptcha</li>
<li style="font-weight: 400">Activate reCaptcha on the following WooCommerce pages: 
<ul>
<li style="font-weight: 400">WooCommerce Registration</li>
<li style="font-weight: 400">WooCommerce Login 
</li>
<li style="font-weight: 400">WooCommerce Lost Password </li>
<li style="font-weight: 400">WooCommerce Checkout 
</li>
<li style="font-weight: 400">Payment Method </li>
<li>Pay for the Order </li>
<li>Product Review </li>
</ul>
</li>
</ul>
</li>
<li>Enable reCaptcha on the following WordPress pages: 
<ul>
<li style="list-style-type: none">
<ul>
<li>WordPress Registration </li>
<li>Lost WordPress Password </li>
<li>WordPress Comments</li>
</ul>
</li>
</ul>
</li>
<li>Multilingual translation ready</li>
<li>Expands captcha options with support for reCaptcha.net</li>
</ul>
<img class="alignnone size-full wp-image-18734004460826" src="https://woocommerce.com/wp-content/uploads/2021/03/google-recaptcha-for-woocommerce-5.png" alt="google recaptcha for woocommerce" width="980" height="414" />
<h2>Supports V2 and V3 reCaptcha</h2>
With Google reCaptcha for WooCommerce, you can add V2 and V3 reCaptcha to your store – providing a strong solution for authenticating and validating customers who visit your online store. 
V2 recaptcha remains visible for everyone, whereas the V3 recaptcha appears only when suspicious traffic is detected and remains hidden for your real customers.
<img class="alignnone size-full wp-image-18734004446735" src="https://woocommerce.com/wp-content/uploads/2021/03/google-recaptcha-for-woocommerce-2.png" alt="" width="980" height="647" />
<h2>Customize reCaptcha for each WooCommerce and WordPress Page 
</h2>
<ul>
<li>The extension allows you to enable reCaptcha on specific WooCommerce and WordPress pages. You can also customize the following reCaptcha options for each page:
<ul>
<li style="font-weight: 400">Field Title</li>
<li style="font-weight: 400">Themes (light or dark)</li>
<li style="font-weight: 400">Size (normal or compact</li>
</ul>
</li>
</ul>
<img class="alignnone size-full wp-image-18734004446739" src="https://woocommerce.com/wp-content/uploads/2021/03/google-recaptcha-for-woocommerce-3.png" alt="" width="980" height="701" />
<h2>Add reCaptcha using Shortcode</h2>
Integrating Google reCaptcha into your website is made even more versatile with the inclusion of a shortcode feature. By enabling the Shortcode reCaptcha option, you can make any page of your website secure by reCaptcha by adding a shortcode [captcha_shortcode] on any desired page.
<img class="alignnone size-full wp-image-18734004446742" src="https://woocommerce.com/wp-content/uploads/2021/03/google-recaptcha-for-woocommerce-4.png" alt="" width="980" height="772" />
<h2>Supports reCaptcha.net</h2>
This WooCommerce reCaptcha extension provides advanced security measures and customization options for online stores. You can choose between Google.com and reCaptcha.net as the preferred reCAPTCHA type. The reCaptcha.net is preferable for countries where Google is blocked. The “No-Conflict Mode” ensures seamless integration by removing other CAPTCHA occurrences on that page to avoid site-breaking conflicts. 
<h2>General Settings</h2>
With additional customization options such as Recaptcha Field Title and a choice between Light and Dark themes, as well as Normal or Compact size, website administrators can seamlessly align reCaptcha with their site’s aesthetics and user experience preferences. 
The plugin allows the exclusion of specific countries and the option to disable reCAPTCHA for designated IP ranges, offering a tailored and robust security solution for WooCommerce websites.
<img class="alignnone size-full wp-image-18734004446744" src="https://woocommerce.com/wp-content/uploads/2021/03/google-recaptcha-for-woocommerce-6.png" alt="" width="980" height="908" />
<h2>Why Google reCaptcha for WooCommerce?</h2>
<img class="aligncenter wp-image-18734003260578 size-full" src="https://woocommerce.com/wp-content/uploads/2021/03/Google-recaptcha-blog-2x-2.png" alt="google recaptcha for woocommerce" width="980" height="3611" />
<h4>Requirements</h4>
Minimum PHP version: 5.6

Google reCaptcha

Protect your website from spam and bot attacks by adding reCaptcha to your WordPress & WooCommerce checkout, login, registration, reset password and other pages.

Anti Fraud Protection vs Google reCaptcha