Fraud Shield for WooCommerce protects your store by blocking spam orders and fake user registrations. It validates user registration, billing, and shipping details, as well as technical fields such as IP address, device type, OS, domain, and subdomain. 
Fraud Shield for WooCommerce is your smart defence against fake signups and spam orders. It uses intelligent validation across registration, billing, shipping, and technical fields (such as IP, OS, and device type) to block suspicious activity, keeping your store secure and clean.
<h3>Types of Fraud Shield Rules</h3>
<ul class="wp-block-list">
<li>Block disposable or suspicious email domains</li>
<li>Detect and block users by IP address, device type (mobile, desktop, bot, etc.)</li>
<li>Detect and block users by operating system (e.g., Android, Windows, Unknown OS)</li>
<li>Block spam user registrations using field-level validation</li>
<li>Prevent fake or suspicious orders by validating checkout fields</li>
<li>Validate billing and shipping details (name, phone, email, ZIP, etc.)</li>
<li>Automatically record users who trigger blocked values as “Blocked Users“</li>
<li>Maintain a Blocked User Log with detailed info (IP, device, OS, etc.)</li>
<li>Maintain a Debug Log to track validation and blocking events</li>
</ul>
<h2>Why you should add Fraud Shield for WooCommerce</h2>
Fraud Shield for WooCommerce is essential for safeguarding your store against the risks of fake sign-ups, spam orders, and fraudulent activities.
By validating user registration details, billing and shipping addresses, and technical parameters such as IP address, device type, operating system, and domain, it prevents suspicious transactions before they impact your business.
Adding Fraud Shield is not just about security — it’s about building trust, maintaining smooth operations, and focusing on growing your business without worrying about threats.
<hr class="wccom-product-heading__hr" />
<h2>When to add Fraud Shield for WooCommerce</h2>
You should add Fraud Shield as soon as you notice or want to prevent suspicious activity in your store. This includes:
<ul>
<li style="font-weight: 400">Receiving spam registrations or fake customer accounts.</li>
<li style="font-weight: 400">Experiencing high-order cancellations or chargebacks.</li>
<li style="font-weight: 400">Getting orders with incomplete or mismatched billing/shipping details.</li>
<li style="font-weight: 400">Seeing multiple signups from the same IP or device in a short time.</li>
<li style="font-weight: 400">Expanding your store to new regions with higher fraud risk.</li>
</ul>
Installing Fraud Shield early helps you stay ahead of threats, avoid revenue loss, and protect your store’s reputation before problems escalate.
<hr class="wccom-product-heading__hr" />
<h2>Types of Rules Configurations</h2>
Fraud Shield for WooCommerce offers four main types of validation rules to protect your store from spam, fake accounts, and fraudulent orders:
<div class="twocol-one">
Registration Rules:
Safeguard your store from fake or spam user signups by validating critical fields during the registration process.
Available settings include username validation to block generic or numeric-only usernames, email username validation to block emails with suspicious local parts, and email domain validation to restrict sign-ups from known spam, disposable, or fake email domains.
</div>
<div class="twocol-one last"><img class="aligncenter size-full wp-image-18734005957183" src="https://woocommerce.com/wp-content/uploads/2025/10/registration_settings.png" alt="Registration settings" width="980" height="719" /></div>
<div class="twocol-one">Checkout Billing Address Rules:
Validate billing details during checkout to prevent fake orders and suspicious transactions. These rules identify incomplete, invalid, or mismatched billing data, stopping fraud before it reaches payment processing.
Available settings cover validation for billing details, including name, address, city, state, country, postal code, email, phone number, and company. This helps block fake, invalid, or disposable information to maintain data accuracy and prevent fraudulent or low-quality orders.
</div>
<div class="twocol-one last"><img class="aligncenter size-full wp-image-18734005957187" src="https://woocommerce.com/wp-content/uploads/2025/10/checkout-settings.png" alt="checkout settings" width="980" height="798" /></div>
Checkout Shipping Address Rules:
Ensure shipping details are accurate and legitimate. By blocking fake or bot-generated addresses, these rules reduce delivery issues, save fulfilment costs, and maintain a smooth order experience for genuine customers.
Available settings cover validation for shipping details, including first and last names, address, city, state, country, postal code, phone number, and company. This ensures the blocking of fake, invalid, or suspicious entries to maintain accurate and trustworthy order information.
<div class="twocol-one">
Technical Rules:
Go beyond basic form validation with system-level checks. Technical rules verify IP addresses, browsers, device types, and other metadata to detect patterns linked to fraudulent behavior. This adds a powerful, invisible layer of protection that works in real time.
Available settings include validation for IP address, device, browser, operating system, email domain, user role, and user ID, allowing you to block traffic from suspicious sources, outdated systems, disposable email domains, restricted user roles, or known spam accounts.
</div>
<div class="twocol-one last"><img class="aligncenter size-full wp-image-18734005957189" src="https://woocommerce.com/wp-content/uploads/2025/10/technical-settings.png" alt="Technical Settings" width="980" height="894" /></div>
With these four layers of configurable rules, Fraud Shield provides precise, proactive control over fraud prevention, helping you block bad actors without disrupting genuine customers.
<hr class="wccom-product-heading__hr" />
<h2>Global Settings</h2>
The General Settings section allows store owners to manage the core functionality of the Fraud Shield for WooCommerce extension.
It provides global controls to enable or disable the extension, configure how fraud detection rules behave, and manage logging for security insights and debugging. These settings help ensure that validation rules are applied efficiently while offering visibility into all blocked attempts. <img class="aligncenter size-full wp-image-18734005957198" src="https://woocommerce.com/wp-content/uploads/2025/10/global-settings.png" alt="Global Settings" width="980" height="654" /> 
<hr class="wccom-product-heading__hr" />
<h2>Blocked User Section</h2>
The “Blocked User” section of this extension offers a comprehensive dashboard that lists all users who were blocked due to failing fraud detection rules during registration or checkout.
<img class="aligncenter size-full wp-image-18734005957209" src="https://woocommerce.com/wp-content/uploads/2025/10/blocked-users.png" alt="blocked users" width="980" height="560" />
<hr class="wccom-product-heading__hr" />
<h2>Prevent fraudulent registrations from specific email domains</h2>
Scenario: You want to prevent fake account creation using disposable emails and suspicious addresses, commonly used for testing or fraudulent purposes.


Steps to create the validation rule:

<ol class="wp-block-list">
<li>In your store’s WP Admin dashboard, go to WooCommerce > Settings > Fraud Shield.</li>


<li>Add a Registration Rule:
<ul class="wp-block-list">
<li style="list-style-type: none">
<ul class="wp-block-list">
<li>Enable fraud shield for registration</li>


<li>Enable email validation</li>


<li>Add value in block email domains like tempmail.com, mailinator.com</li>


<li>Save your changes for the registration rule <img src="https://woocommerce.com/wp-content/uploads/2025/10/registration-user-block-admin-settings.png?w=980" alt="" /></li>
</ul>
</li>
</ul>
<ul class="wp-block-list"></ul>
</li>


<li>Now, if a customer adds an email with a domain name that is blocked with error message. <img src="https://woocommerce.com/wp-content/uploads/2025/10/user-registration-validation.png" alt="" /></li>
</ol>

<hr class="wccom-product-heading__hr" />
<h2>How to Block Fraud Orders</h2>
Configure to protect your WooCommerce store by blocking fraudulent orders automatically. Use smart filters like user email, name, and other identifiers to stop scammers before checkout.
<h3>Ways to Block Fraudulent Orders:</h3>
<ul class="wccom-tick-list-primary">
<li>Block by Email Address – Add suspicious or blacklisted email IDs to automatically prevent new orders.</li>
<li>Block by Customer Name – Stop repeat offenders or fake name patterns (e.g., “Test User,” “Demo Buyer”).</li>
<li>Block by Domain – Restrict orders from disposable or spammy email domains like @tempmail.com.</li>
<li>Custom Rule Setup – Create multiple blocking conditions (email + name + payment method) for maximum protection.</li>
</ul>
<div class="twocol-one">
Admin Setting Screen
<img class="aligncenter size-full wp-image-18734005957546" src="https://woocommerce.com/wp-content/uploads/2025/10/admin-order-block-by-email-settings.png" alt="admin order block by email settings" width="980" height="493" /></div>
<div class="twocol-one last">
Checkout Page Screen
<img class="aligncenter size-full wp-image-18734005957547" src="https://woocommerce.com/wp-content/uploads/2025/10/checkout-page-email-block.png" alt="" width="980" height="623" /></div>
<hr class="wccom-product-heading__hr" />
<h2>How to Get Started</h2>
<ol>
<li>Download, install, and activate this extension.</li>
<li>Check out our <a href="https://woocommerce.com/document/fraud-shield/">detailed documentation</a> to help you customize your fraud prevention tools specific to your store’s needs.</li>
<li>Something missing or could be done better? We love feedback — let us know how we’re doing via support and we’ll gladly assist!</li>
</ol>

Fraud Shield

Protect your WooCommerce store from spam orders and fake registrations with ease.

<blockquote>
<h1 style="text-align: center">Protect Your Site With reCaptcha</h1>
</blockquote>
With the WooCommerce reCaptcha extension, you can add Google reCaptcha to WordPress and WooCommerce login, registration, password pages, checkout, comments, and more. You can also add reCaptcha on any page using the shortcode. The extension supports v2 and v3 versions of Google Invisible captcha.
With increased spam and hacking attempts, the extension can act as an extra security gate to block bot traffic from making login attempts, checkouts, card checking, password resets, spam comments, and more. 
By using the invisible reCaptcha v3 version, you ensure that the captcha only appears to suspicious visitors and remains hidden from your valuable and real customers. You can also customize the spam score of V3 reCaptcha as per your website’s needs.
<div class="woo-sc-box normal" style="text-align: center;background-color: #ffc4bd">Attention! 
To prevent your WooCommerce stores from the ongoing surge in carding attacks and fraudulent transactions, it is highly advised to use <a href="https://woocommerce.com/products/anti-fraud-shield-for-woocommerce/">Anti-Fraud Shield</a> in Combination with <a href="https://woocommerce.com/products/google-recaptcha-for-woocommerce/">Google reCaptcha for WooCommerce</a>.</div>
<img class="alignnone size-full wp-image-18734004579813" src="https://woocommerce.com/wp-content/uploads/2021/03/bnr.jpg" alt="google recaptcha for woocommerce" width="901" height="105" />
<h2>Now with Checkout Rate Lmiter – Ultimate Solution for Carding Attacks (New)</h2>
Limit manual carding testing attacks in your WooCommerce store using checkout rate-limiting technology. While reCaptcha stops bot-based carding attempts by recognizing the repeating patterns, the rate limiter will now complement reCaptcha by restricting users from making multiple checkout attempts within a specified period. This makes Google reCaptcha for WooCommerce the ultimate solution for all sorts of carding attempts. With the checkout rate limiter’s enhanced settings, you can:
<ul>
<li>Add rate limiter limits</li>
<li>Add time for which the place order button will be disabled when all attempts are exhausted</li>
<li>Add an error message to show when the rate limiter is triggered</li>
<li>Add IPs for which rate limiter will be disabled</li>
<li>Add IPs for which the place order button will be disabled</li>
<li>Add emails for which the place order button will be disbaled</li>
<li>Add user roles for which rate limiter will be disabled</li>
</ul>
<img class="alignnone size-full wp-image-18734004977215" src="https://woocommerce.com/wp-content/uploads/2021/03/recaptcha-for-woocommerce-129865.png" alt="recaptcha for woocommerce" width="980" height="575" />
<h2>Features of WooCommerce reCaptcha:</h2>
<ul>
<li style="list-style-type: none">
<ul>
<li style="font-weight: 400">Supports v2 and v3 versions</li>
<li style="font-weight: 400">Activate reCaptcha individually on certain pages</li>
<li style="font-weight: 400">Customize reCaptcha sizes</li>
<li style="font-weight: 400">Choose between dark and light reCaptcha themes</li>
<li style="font-weight: 400">Disable reCaptcha for specific countries</li>
<li style="font-weight: 400">Excludes a specific IP range</li>
<li style="font-weight: 400">Add reCaptcha anywhere using shortcode</li>
<li style="font-weight: 400">Customize spam score for V3 recaptcha</li>
<li style="font-weight: 400">Activate reCaptcha on the following WooCommerce pages: 
<ul>
<li style="font-weight: 400">WooCommerce Registration</li>
<li style="font-weight: 400">WooCommerce Login 
</li>
<li style="font-weight: 400">WooCommerce Lost Password </li>
<li style="font-weight: 400">WooCommerce Checkout 
</li>
<li style="font-weight: 400">Payment Method </li>
<li>Pay for the Order </li>
<li>Product Review </li>
</ul>
</li>
</ul>
</li>
<li>Enable reCaptcha on the following WordPress pages: 
<ul>
<li style="list-style-type: none">
<ul>
<li>WordPress Registration </li>
<li>Lost WordPress Password </li>
<li>WordPress Comments</li>
</ul>
</li>
</ul>
</li>
<li>Multilingual translation ready</li>
<li>Expands captcha options with support for reCaptcha.net</li>
</ul>
<img class="alignnone size-full wp-image-18734004460826" src="https://woocommerce.com/wp-content/uploads/2021/03/google-recaptcha-for-woocommerce-5.png" alt="google recaptcha for woocommerce" width="980" height="414" />
<h2>Supports V2 and V3 reCaptcha</h2>
With Google reCaptcha for WooCommerce, you can add V2 and V3 reCaptcha to your store – providing a strong solution for authenticating and validating customers who visit your online store. 
V2 recaptcha remains visible for everyone, whereas the V3 recaptcha appears only when suspicious traffic is detected and remains hidden for your real customers.
<img class="alignnone size-full wp-image-18734004446735" src="https://woocommerce.com/wp-content/uploads/2021/03/google-recaptcha-for-woocommerce-2.png" alt="" width="980" height="647" />
<h2>Customize reCaptcha for each WooCommerce and WordPress Page 
</h2>
<ul>
<li>The extension allows you to enable reCaptcha on specific WooCommerce and WordPress pages. You can also customize the following reCaptcha options for each page:
<ul>
<li style="font-weight: 400">Field Title</li>
<li style="font-weight: 400">Themes (light or dark)</li>
<li style="font-weight: 400">Size (normal or compact</li>
</ul>
</li>
</ul>
<img class="alignnone size-full wp-image-18734004446739" src="https://woocommerce.com/wp-content/uploads/2021/03/google-recaptcha-for-woocommerce-3.png" alt="" width="980" height="701" />
<h2>Add reCaptcha using Shortcode</h2>
Integrating Google reCaptcha into your website is made even more versatile with the inclusion of a shortcode feature. By enabling the Shortcode reCaptcha option, you can make any page of your website secure by reCaptcha by adding a shortcode [captcha_shortcode] on any desired page.
<img class="alignnone size-full wp-image-18734004446742" src="https://woocommerce.com/wp-content/uploads/2021/03/google-recaptcha-for-woocommerce-4.png" alt="" width="980" height="772" />
<h2>Supports reCaptcha.net</h2>
This WooCommerce reCaptcha extension provides advanced security measures and customization options for online stores. You can choose between Google.com and reCaptcha.net as the preferred reCAPTCHA type. The reCaptcha.net is preferable for countries where Google is blocked. The “No-Conflict Mode” ensures seamless integration by removing other CAPTCHA occurrences on that page to avoid site-breaking conflicts. 
<h2>General Settings</h2>
With additional customization options such as Recaptcha Field Title and a choice between Light and Dark themes, as well as Normal or Compact size, website administrators can seamlessly align reCaptcha with their site’s aesthetics and user experience preferences. 
The plugin allows the exclusion of specific countries and the option to disable reCAPTCHA for designated IP ranges, offering a tailored and robust security solution for WooCommerce websites.
<img class="alignnone size-full wp-image-18734004446744" src="https://woocommerce.com/wp-content/uploads/2021/03/google-recaptcha-for-woocommerce-6.png" alt="" width="980" height="908" />
<h2>Why Google reCaptcha for WooCommerce?</h2>
<img class="aligncenter wp-image-18734003260578 size-full" src="https://woocommerce.com/wp-content/uploads/2021/03/Google-recaptcha-blog-2x-2.png" alt="google recaptcha for woocommerce" width="980" height="3611" />
<h4>Requirements</h4>
Minimum PHP version: 5.6

Google reCaptcha

Protect your website from spam and bot attacks by adding reCaptcha to your WordPress & WooCommerce checkout, login, registration, reset password and other pages.

Fraud Shield vs Google reCaptcha