<p><b>Fraud Shield for WooCommerce </b><span style="font-weight: 400">protects your store by blocking spam orders and fake user registrations. It validates user registration, billing, and shipping details, as well as technical fields such as IP address, device type, OS, domain, and subdomain. </span></p>
<p><span style="font-weight: 400"><strong>Fraud Shield for WooCommerce</strong> is your smart defence against fake signups and spam orders. It uses intelligent validation across registration, billing, shipping, and technical fields (such as IP, OS, and device type) to block suspicious activity, keeping your store secure and clean.</span></p>
<h3>Types of Fraud Shield Rules</h3>
<ul class="wp-block-list">
<li>Block disposable or suspicious email domains</li>
<li>Detect and block users by IP address, device type (mobile, desktop, bot, etc.)</li>
<li>Detect and block users by operating system (e.g., Android, Windows, Unknown OS)</li>
<li>Block spam user registrations using field-level validation</li>
<li>Prevent fake or suspicious orders by validating checkout fields</li>
<li>Validate billing and shipping details (name, phone, email, ZIP, etc.)</li>
<li>Automatically record users who trigger blocked values as “<strong>Blocked Users</strong>“</li>
<li>Maintain a Blocked <strong>User Log </strong>with detailed info (IP, device, OS, etc.)</li>
<li>Maintain a <strong>Debug Log</strong> to track validation and blocking events</li>
</ul>
<h2>Why you should add Fraud Shield for WooCommerce</h2>
<p><span style="font-weight: 400">Fraud Shield for WooCommerce is essential for safeguarding your store against the risks of fake sign-ups, spam orders, and fraudulent activities.</span></p>
<p><span style="font-weight: 400">By validating user registration details, billing and shipping addresses, and technical parameters such as IP address, device type, operating system, and domain, it prevents suspicious transactions before they impact your business.</span></p>
<p><span style="font-weight: 400">Adding Fraud Shield is not just about security — it’s about building trust, maintaining smooth operations, and focusing on growing your business without worrying about threats.</span></p>
<hr class="wccom-product-heading__hr" />
<h2>When to add Fraud Shield for WooCommerce</h2>
<p><span style="font-weight: 400">You should add Fraud Shield as soon as you notice or want to prevent suspicious activity in your store. This includes:</span></p>
<ul>
<li style="font-weight: 400"><span style="font-weight: 400">Receiving </span><b>spam registrations</b><span style="font-weight: 400"> or fake customer accounts.</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Experiencing </span><b>high-order cancellations</b><span style="font-weight: 400"> or chargebacks.</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Getting orders with </span><b>incomplete or mismatched billing/shipping details</b><span style="font-weight: 400">.</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Seeing </span><b>multiple signups from the same IP or device</b><span style="font-weight: 400"> in a short time.</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Expanding your store to </span><b>new regions</b><span style="font-weight: 400"> with higher fraud risk.</span></li>
</ul>
<p><span style="font-weight: 400">Installing Fraud Shield early helps you stay ahead of threats, avoid revenue loss, and protect your store’s reputation before problems escalate.</span></p>
<hr class="wccom-product-heading__hr" />
<h2>Types of Rules Configurations</h2>
<p><span style="font-weight: 400">Fraud Shield for WooCommerce offers four main types of validation rules to protect your store from spam, fake accounts, and fraudulent orders:</span></p>
<div class="twocol-one">
<p><b>Registration Rules:</b></p>
<p>Safeguard your store from fake or spam user signups by validating critical fields during the registration process.</p>
<p>Available settings include username validation to block generic or numeric-only usernames, email username validation to block emails with suspicious local parts, and email domain validation to restrict sign-ups from known spam, disposable, or fake email domains.</p>
</div>
<div class="twocol-one last"><img class="aligncenter size-full wp-image-18734005957183" src="https://woocommerce.com/wp-content/uploads/2025/10/registration_settings.png" alt="Registration settings" width="980" height="719" /></div>
<div class="twocol-one"><b>Checkout Billing Address Rules:</b></p>
<p>Validate billing details during checkout to prevent fake orders and suspicious transactions. These rules identify incomplete, invalid, or mismatched billing data, stopping fraud before it reaches payment processing.</p>
<p>Available settings cover validation for billing details, including name, address, city, state, country, postal code, email, phone number, and company. This helps block fake, invalid, or disposable information to maintain data accuracy and prevent fraudulent or low-quality orders.</p>
</div>
<div class="twocol-one last"><img class="aligncenter size-full wp-image-18734005957187" src="https://woocommerce.com/wp-content/uploads/2025/10/checkout-settings.png" alt="checkout settings" width="980" height="798" /></div>
<p><b>Checkout Shipping Address Rules:</b></p>
<p>Ensure shipping details are accurate and legitimate. By blocking fake or bot-generated addresses, these rules reduce delivery issues, save fulfilment costs, and maintain a smooth order experience for genuine customers.</p>
<p>Available settings cover validation for shipping details, including first and last names, address, city, state, country, postal code, phone number, and company. This ensures the blocking of fake, invalid, or suspicious entries to maintain accurate and trustworthy order information.</p>
<div class="twocol-one">
<p><b>Technical Rules:</b></p>
<p>Go beyond basic form validation with system-level checks. Technical rules verify IP addresses, browsers, device types, and other metadata to detect patterns linked to fraudulent behavior. This adds a powerful, invisible layer of protection that works in real time.</p>
<p>Available settings include validation for IP address, device, browser, operating system, email domain, user role, and user ID, allowing you to block traffic from suspicious sources, outdated systems, disposable email domains, restricted user roles, or known spam accounts.</p>
</div>
<div class="twocol-one last"><img class="aligncenter size-full wp-image-18734005957189" src="https://woocommerce.com/wp-content/uploads/2025/10/technical-settings.png" alt="Technical Settings" width="980" height="894" /></div>
<p>With these four layers of configurable rules, Fraud Shield provides <b>precise, proactive control</b><span style="font-weight: 400"> over fraud prevention, helping you block bad actors without disrupting genuine customers.</span></p>
<hr class="wccom-product-heading__hr" />
<h2>Global Settings</h2>
<p><span style="font-weight: 400">The General Settings section allows store owners to manage the core functionality of the </span><b>Fraud Shield for WooCommerce</b><span style="font-weight: 400"> extension.</p>
<p>It provides global controls to enable or disable the extension, configure how fraud detection rules behave, and manage logging for security insights and debugging. <br />These settings help ensure that validation rules are applied efficiently while offering visibility into all blocked attempts</span><span style="font-weight: 400">.<br /><img class="aligncenter size-full wp-image-18734005957198" src="https://woocommerce.com/wp-content/uploads/2025/10/global-settings.png" alt="Global Settings" width="980" height="654" /><br /></span></p>
<hr class="wccom-product-heading__hr" />
<h2>Blocked User Section</h2>
<p><span style="font-weight: 400">The “</span><b>Blocked User</b><span style="font-weight: 400">” section of this extension offers a comprehensive dashboard that lists all users who were blocked due to failing fraud detection rules during registration or checkout.</span></p>
<p><img class="aligncenter size-full wp-image-18734005957209" src="https://woocommerce.com/wp-content/uploads/2025/10/blocked-users.png" alt="blocked users" width="980" height="560" /></p>
<hr class="wccom-product-heading__hr" />
<h2>Prevent fraudulent registrations from specific email domains</h2>
<p><strong>Scenario:</strong> You want to prevent fake account creation using disposable emails and suspicious addresses, commonly used for testing or fraudulent purposes.</p>
<p></p>
<p></p>
<p><strong>Steps to create the validation rule:</strong></p>
<p></p>
<ol class="wp-block-list"></p>
<li>In your store’s WP Admin dashboard, go to <em>WooCommerce > Settings > Fraud Shield</em>.</li>
<p></p>
<p></p>
<li>Add a Registration Rule:
<ul class="wp-block-list">
<li style="list-style-type: none">
<ul class="wp-block-list"></p>
<li>Enable fraud shield for registration</li>
<p></p>
<p></p>
<li>Enable email validation</li>
<p></p>
<p></p>
<li>Add value in block email domains like tempmail.com, mailinator.com</li>
<p></p>
<p></p>
<li>Save your changes for the registration rule <img src="https://woocommerce.com/wp-content/uploads/2025/10/registration-user-block-admin-settings.png?w=980" alt="" /></li>
</ul>
</li>
</ul>
<ul class="wp-block-list"></ul>
<p></li>
<p></p>
<p></p>
<li>Now, if a customer adds an email with a domain name that is blocked with error message. <img src="https://woocommerce.com/wp-content/uploads/2025/10/user-registration-validation.png" alt="" /></li>
</ol>
<p></p>
<hr class="wccom-product-heading__hr" />
<h2>How to Block Fraud Orders</h2>
<p>Configure to protect your WooCommerce store by blocking fraudulent orders automatically. Use smart filters like user email, name, and other identifiers to stop scammers before checkout.</p>
<h3>Ways to Block Fraudulent Orders:</h3>
<ul class="wccom-tick-list-primary">
<li><strong>Block by Email Address</strong> – Add suspicious or blacklisted email IDs to automatically prevent new orders.</li>
<li><strong>Block by Customer Name</strong> – Stop repeat offenders or fake name patterns (e.g., “Test User,” “Demo Buyer”).</li>
<li><strong>Block by Domain</strong> – Restrict orders from disposable or spammy email domains like <em>@tempmail.com</em>.</li>
<li><strong>Custom Rule Setup</strong> – Create multiple blocking conditions (email + name + payment method) for maximum protection.</li>
</ul>
<div class="twocol-one">
<p><b>Admin Setting Screen</b></p>
<p><img class="aligncenter size-full wp-image-18734005957546" src="https://woocommerce.com/wp-content/uploads/2025/10/admin-order-block-by-email-settings.png" alt="admin order block by email settings" width="980" height="493" /></div>
<div class="twocol-one last">
<p><b>Checkout Page Screen</b></p>
<p><img class="aligncenter size-full wp-image-18734005957547" src="https://woocommerce.com/wp-content/uploads/2025/10/checkout-page-email-block.png" alt="" width="980" height="623" /></div>
<hr class="wccom-product-heading__hr" />
<h2>How to Get Started</h2>
<ol>
<li>Download, install, and activate this extension.</li>
<li>Check out our <a href="https://woocommerce.com/document/fraud-shield/">detailed documentation</a> to help you customize your fraud prevention tools specific to your store’s needs.</li>
<li>Something missing or could be done better? We love feedback — let us know how we’re doing via support and we’ll gladly assist!</li>
</ol>

Fraud Shield

<p>Protect your WooCommerce store from spam orders and fake registrations with ease.</p>

<h2>Security for WooCommerce:</h2>
<p>Fraudsters often use VPNs and proxies to hide their identities, putting eCommerce businesses at risk. <strong data-start="102" data-end="130">Security for WooCommerce</strong> helps you detect and block high-risk transactions by identifying masked locations and restricting purchases from countries you don’t sell to. While it strengthens your store’s security, it does not protect against velocity attacks. For advanced fraud prevention, check out <a href="//woocommerce.com/products/woocommerce-anti-fraud/" rel="noopener" data-start="404" data-end="431"> Anti-Fraud for Woocommerce</a>.</p>
<h2><strong>Key Features</strong></h2>
<div class="two-columns">
<p></p>
<div class="twocol-one">
<h3><strong>Restrict Sales to a Single Country</strong></h3>
<p>If your business operates domestically, you can limit sales to a single country to focus on your target market and block unwanted traffic from other regions.</p>
<p><img class="alignnone wp-image-18734004756467" src="https://woocommerce.com/wp-content/uploads/2022/11/AllowOnlyTrafficFromCountry.webp?w=896" alt="Allow Only Traffic From one Country" width="693" height="390" /></p>
</div>
<div class="twocol-one">
<h3><strong>Manually Allow or Block Individual IP Addresses</strong></h3>
<p>With<strong> Security for WooCommerce,</strong> you can manually manage IP access by blocking suspicious users or allowing trusted ones. Add problematic IPs to the Blacklist to prevent fraud, or Whitelist trusted users like admins or virtual assistants for seamless access. This ensures secure, controlled access while protecting your store.<img class="alignnone wp-image-18734004756439" src="https://woocommerce.com/wp-content/uploads/2022/11/RandomIps.webp?w=896" alt="restrict access to cart at checkout" width="693" height="390" /><br />
<strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Restrict Access to Cart and Checkout</strong></p>
<p>Enhances security by allowing you to restrict access to the cart and checkout pages based on a visitor’s country.</p>
<p><img class="alignnone wp-image-18734004756362" src="https://woocommerce.com/wp-content/uploads/2022/11/RestrictAccess.webp?w=896" alt="" width="693" height="390" /></p>
<h3><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Restrict Access at the Product Level</strong></h3>
<p>Strengthens security by allowing you to restrict access to a product based on a visitor’s country.</p>
<p><img class="alignnone wp-image-18734004756380" src="https://woocommerce.com/wp-content/uploads/2022/11/AccessAtProductLevel.webp?w=896" alt="" width="693" height="390" /></p>
<h3><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Category-Based Product Restrictions</strong></h3>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Allows precise control over product visibility by region. The </span><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Category<br />
Restrictions On/Off </strong><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">setting enables or disables category-based blocking, while </span><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Block Products by Category </strong><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">lets you restrict specific WooCommerce product categories for visitors from blocked countries, ensuring compliance and a tailored shopping experience.</span></p>
<p><img class="alignnone wp-image-18734004756400" src="https://woocommerce.com/wp-content/uploads/2022/11/CategoryOnOff.webp?w=896" alt="" width="693" height="390" /></p>
<h3><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">For Publicly Accessible Download Product Links</strong></h3>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Secure your downloadable products with IP-based access control. Choose <strong>Whitelist Mode</strong> to block specific IPs or <strong>Blacklist Mode</strong> to allow only approved IPs. Custom error messages ensure unauthorized downloads are prevented, providing extra protection and control for your WooCommerce store.</span></p>
<p><img class="alignnone wp-image-18734004756395" src="https://woocommerce.com/wp-content/uploads/2022/11/PublicAccessibleDownloadlinks.webp?w=896" alt="whitelisting and blacklisting toggles" width="693" height="390" /></p>
<div class="flex max-w-full flex-col flex-grow">
<div class="min-h-8 text-message flex w-full flex-col items-end gap-2 whitespace-normal break-words text-start [.text-message+&]:mt-5" dir="auto" data-message-author-role="assistant" data-message-id="ae4271fb-4acd-4aa0-bca9-25faed52bb26" data-message-model-slug="gpt-4o">
<div class="flex w-full flex-col gap-1 empty:hidden first:pt-[3px]">
<div class="markdown prose w-full break-words dark:prose-invert light">
<p><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Block Visitors Access between Timeframe</strong></p>
</div>
</div>
</div>
</div>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Enables you to restrict order placement to specific timeframes, ideal for stores serving a particular country or region and aiming to prevent orders from unintended time zones or areas.</span></p>
<p><img class="alignnone wp-image-18734004756413" src="https://woocommerce.com/wp-content/uploads/2022/11/RestrictTimeFrame.webp?w=896" alt="block visitors access between timeframe toggle and time range" width="693" height="390" /></p>
<h3><strong style="font-family: var(--wccom-font-family-header);font-size: var(--wp--preset--font-size--paragraph-medium,18px);letter-spacing: -0.02em">Enhanced Site Protection</strong></h3>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em;font-size: 16px">The comprehensive WooCommerce Security plugin includes features to enhance site protection. It can hide the WordPress version number to prevent attackers from identifying version-specific vulnerabilities. Two-Factor Authentication (2FA) adds an extra layer of security by requiring a second verification step. Additionally, a passcode protection feature allows restricted access using a configured username and password. All features are disabled by default.</span></p>
</div>
<div class="twocol-one">
<div class="flex max-w-full flex-col flex-grow">
<p><img class="alignnone wp-image-18734004756423" src="https://woocommerce.com/wp-content/uploads/2022/11/EnhancedSiteProteciton.webp?w=896" alt="enhanced site protection toggles" width="693" height="390" /></p>
<div class="flex max-w-full flex-col flex-grow">
<div class="min-h-8 text-message flex w-full flex-col items-end gap-2 whitespace-normal break-words text-start [.text-message+&]:mt-5" dir="auto" data-message-author-role="assistant" data-message-id="ae4271fb-4acd-4aa0-bca9-25faed52bb26" data-message-model-slug="gpt-4o">
<div class="flex w-full flex-col gap-1 empty:hidden first:pt-[3px]">
<div class="markdown prose w-full break-words dark:prose-invert light">
<p><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Scan Malware Manually</strong></p>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Enables on-demand malware scans for your WordPress site, detecting security threats, suspicious code, and compromised files. Users can initiate a detailed scan with one click, receiving results that include the last scan date, infected files with suspected line numbers, and total threats found. The scanner checks PHP files, detects malicious patterns, and compares files against malware signatures, with results stored in the WordPress database and displayed in a table.</span></p>
</div>
</div>
</div>
</div>
<p><img class="alignnone wp-image-18734004756432" src="https://woocommerce.com/wp-content/uploads/2022/11/ScanMalware.webp?w=896" alt="scan malware manually button" width="693" height="390" /></p>
<div class="flex max-w-full flex-col flex-grow">
<div class="min-h-8 text-message flex w-full flex-col items-end gap-2 whitespace-normal break-words text-start [.text-message+&]:mt-5" dir="auto" data-message-author-role="assistant" data-message-id="ae4271fb-4acd-4aa0-bca9-25faed52bb26" data-message-model-slug="gpt-4o">
<div class="flex w-full flex-col gap-1 empty:hidden first:pt-[3px]">
<div class="markdown prose w-full break-words dark:prose-invert light"><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Directory and File Protection Settings</strong></div>
<div>These features help keep your site’s folders and files private and secure.<strong> Directory Listing Protection</strong> blocks people from browsing your folders, while <strong>File Indexing Protection</strong> prevents search engines from displaying sensitive files. Together, they keep your file structure hidden and your content safe. Both are off by default but can be easily turned on for extra security.</div>
<div><img class="alignnone wp-image-18734004756429" src="https://woocommerce.com/wp-content/uploads/2022/11/PreventDirectory.webp?w=896" alt="Prevent direct access directory on/off toggle" width="693" height="390" /></div>
</div>
</div>
</div>
<div class="group/conversation-turn relative flex w-full min-w-0 flex-col agent-turn">
<div class="flex-col gap-1 md:gap-3">
<div class="flex max-w-full flex-col flex-grow">
<div class="min-h-8 text-message flex w-full flex-col items-end gap-2 whitespace-normal break-words text-start [.text-message+&]:mt-5" dir="auto" data-message-author-role="assistant" data-message-id="7ba194b5-e21f-46a2-9ae8-e3f0af69f4c8" data-message-model-slug="gpt-4o">
<div class="flex w-full flex-col gap-1 empty:hidden first:pt-[3px]">
<div class="markdown prose w-full break-words dark:prose-invert light">
<p>The comprehensive <strong>Security for WooCommerce</strong> plugin ensures your website remains discoverable by allowing trusted search engine bots to index your site, even if they originate from blocked countries. You’ll receive <strong>email alerts</strong> whenever a blocked visitor attempts to log in via WP-Admin. Designed to help WooCommerce businesses block unwanted traffic, this plugin allows you to focus on serving genuine customers.</p>
<p><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Block Visitors Access between Timeframe</strong></p>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Empowers you to restrict order placement to specific timeframes, ideal for stores serving a particular country or region and aiming to prevent orders from unintended time zones or areas.</span></p>
<p><img class="alignnone wp-image-18734004756413" src="https://woocommerce.com/wp-content/uploads/2022/11/RestrictTimeFrame.webp?w=896" alt="Block visitors access between timeframe toggle" width="693" height="390" /></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<div class="twocol-one last"></div>
</div>

Security

<h3>Stop Location Spoofing & Block VPN/Proxy Fraudsters</h3>

Fraud Shield vs Security