<blockquote>
<h1 style="text-align: center">Protect Your Site With reCaptcha</h1>
</blockquote>
<p><span style="font-weight: 400">With the WooCommerce reCaptcha extension, you can add Google reCaptcha to WordPress and WooCommerce login, registration, password pages, checkout, comments, and more. You can also add reCaptcha on any page using the shortcode. The extension supports v2 and v3 versions of Google Invisible captcha.</span></p>
<p><span style="font-weight: 400">With increased spam and hacking attempts, the extension can act as an extra security gate to block bot traffic from making login attempts, checkouts, card checking, password resets, spam comments, and more. </span></p>
<p><span style="font-weight: 400">By using the invisible reCaptcha v3 version, you ensure that the captcha only appears to suspicious visitors and remains hidden from your valuable and real customers. You can also customize the spam score of V3 reCaptcha as per your website’s needs.</span></p>
<div class="woo-sc-box normal" style="text-align: center;background-color: #ffc4bd"><b>Attention!</b><br />
To prevent your WooCommerce stores from the ongoing surge in carding attacks and fraudulent transactions, it is highly advised to use <a href="https://woocommerce.com/products/anti-fraud-shield-for-woocommerce/">Anti-Fraud Shield</a> in Combination with <a href="https://woocommerce.com/products/google-recaptcha-for-woocommerce/">Google reCaptcha for WooCommerce</a>.</div>
<p><img class="alignnone size-full wp-image-18734004579813" src="https://woocommerce.com/wp-content/uploads/2021/03/bnr.jpg" alt="google recaptcha for woocommerce" width="901" height="105" /></p>
<h2>Now with Checkout Rate Lmiter – Ultimate Solution for Carding Attacks (<strong>New</strong>)</h2>
<p>Limit manual carding testing attacks in your WooCommerce store using checkout rate-limiting technology. While reCaptcha stops bot-based carding attempts by recognizing the repeating patterns, the rate limiter will now complement reCaptcha by restricting users from making multiple checkout attempts within a specified period. This makes Google reCaptcha for WooCommerce the ultimate solution for all sorts of carding attempts. With the checkout rate limiter’s enhanced settings, you can:</p>
<ul>
<li>Add rate limiter limits</li>
<li>Add time for which the place order button will be disabled when all attempts are exhausted</li>
<li>Add an error message to show when the rate limiter is triggered</li>
<li>Add IPs for which rate limiter will be disabled</li>
<li>Add IPs for which the place order button will be disabled</li>
<li>Add emails for which the place order button will be disbaled</li>
<li>Add user roles for which rate limiter will be disabled</li>
</ul>
<p><img class="alignnone size-full wp-image-18734004977215" src="https://woocommerce.com/wp-content/uploads/2021/03/recaptcha-for-woocommerce-129865.png" alt="recaptcha for woocommerce" width="980" height="575" /></p>
<h2>Features of WooCommerce reCaptcha:</h2>
<ul>
<li style="list-style-type: none">
<ul>
<li style="font-weight: 400"><span style="font-weight: 400">Supports v2 and v3 versions</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Activate reCaptcha individually on certain pages</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Customize reCaptcha sizes</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Choose between dark and light reCaptcha themes</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Disable reCaptcha for specific countries</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Excludes a specific IP range</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Add reCaptcha anywhere using shortcode</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Customize spam score for V3 recaptcha</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Activate reCaptcha on the following WooCommerce pages: </span>
<ul>
<li style="font-weight: 400"><span style="font-weight: 400">WooCommerce Registration</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">WooCommerce Login<br />
</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">WooCommerce Lost Password </span></li>
<li style="font-weight: 400"><span style="font-weight: 400">WooCommerce Checkout<br />
</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Payment Method </span></li>
<li><span style="font-weight: 400">Pay for the Order </span></li>
<li><span style="font-weight: 400">Product Review </span></li>
</ul>
</li>
</ul>
</li>
<li><span style="font-weight: 400">Enable reCaptcha on the following WordPress pages: </span>
<ul>
<li style="list-style-type: none">
<ul>
<li><span style="font-weight: 400">WordPress Registration </span></li>
<li><span style="font-weight: 400">Lost WordPress Password </span></li>
<li><span style="font-weight: 400">WordPress Comments</span></li>
</ul>
</li>
</ul>
</li>
<li><span style="font-weight: 400">Multilingual translation ready</span></li>
<li><span style="font-weight: 400">Expands captcha options with support for reCaptcha.net</span></li>
</ul>
<p><img class="alignnone size-full wp-image-18734004460826" src="https://woocommerce.com/wp-content/uploads/2021/03/google-recaptcha-for-woocommerce-5.png" alt="google recaptcha for woocommerce" width="980" height="414" /></p>
<h2>Supports V2 and V3 reCaptcha</h2>
<p><span style="font-weight: 400">With Google reCaptcha for WooCommerce, you can add V2 and V3 reCaptcha to your store – providing a strong solution for authenticating and validating customers who visit your online store. </span></p>
<p><span style="font-weight: 400">V2 recaptcha remains visible for everyone, whereas the V3 recaptcha appears only when suspicious traffic is detected and remains hidden for your real customers.</span></p>
<p><img class="alignnone size-full wp-image-18734004446735" src="https://woocommerce.com/wp-content/uploads/2021/03/google-recaptcha-for-woocommerce-2.png" alt="" width="980" height="647" /></p>
<h2><span data-preserver-spaces="true">Customize reCaptcha for each WooCommerce and WordPress Page<br />
</span></h2>
<ul>
<li><span style="font-weight: 400">The extension allows you to enable reCaptcha on specific WooCommerce and WordPress pages. You can also customize the following reCaptcha options for each page:</span>
<ul>
<li style="font-weight: 400"><span style="font-weight: 400">Field Title</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Themes (light or dark)</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Size (normal or compact</span></li>
</ul>
</li>
</ul>
<p><img class="alignnone size-full wp-image-18734004446739" src="https://woocommerce.com/wp-content/uploads/2021/03/google-recaptcha-for-woocommerce-3.png" alt="" width="980" height="701" /></p>
<h2><span data-preserver-spaces="true">Add reCaptcha using Shortcode</span></h2>
<p><span style="font-weight: 400">Integrating Google reCaptcha into your website is made even more versatile with the inclusion of a shortcode feature. By enabling the Shortcode reCaptcha option, you can make any page of your website secure by reCaptcha by adding a shortcode </span><b>[captcha_shortcode] </b><span style="font-weight: 400">on any desired page</span><b>.</b></p>
<p><img class="alignnone size-full wp-image-18734004446742" src="https://woocommerce.com/wp-content/uploads/2021/03/google-recaptcha-for-woocommerce-4.png" alt="" width="980" height="772" /></p>
<h2><span data-preserver-spaces="true">Supports reCaptcha.net</span></h2>
<p><span style="font-weight: 400">This WooCommerce reCaptcha extension provides advanced security measures and customization options for online stores. You can choose between Google.com and reCaptcha.net as the preferred reCAPTCHA type. The reCaptcha.net is preferable for countries where Google is blocked. The “No-Conflict Mode” ensures seamless integration by removing other CAPTCHA occurrences on that page to avoid site-breaking conflicts. </span></p>
<h2><span data-preserver-spaces="true">General Settings</span></h2>
<p><span style="font-weight: 400">With additional customization options such as Recaptcha Field Title and a choice between Light and Dark themes, as well as Normal or Compact size, website administrators can seamlessly align reCaptcha with their site’s aesthetics and user experience preferences. </span></p>
<p><span style="font-weight: 400">The plugin allows the exclusion of specific countries and the option to disable reCAPTCHA for designated IP ranges, offering a tailored and robust security solution for WooCommerce websites.</span></p>
<p><img class="alignnone size-full wp-image-18734004446744" src="https://woocommerce.com/wp-content/uploads/2021/03/google-recaptcha-for-woocommerce-6.png" alt="" width="980" height="908" /></p>
<h2>Why Google reCaptcha for WooCommerce?</h2>
<p><img class="aligncenter wp-image-18734003260578 size-full" src="https://woocommerce.com/wp-content/uploads/2021/03/Google-recaptcha-blog-2x-2.png" alt="google recaptcha for woocommerce" width="980" height="3611" /></p>
<h4>Requirements</h4>
<p>Minimum PHP version: 5.6</p>

Google reCaptcha

<p>Protect your website from spam and bot attacks by adding reCaptcha to your WordPress & WooCommerce checkout, login, registration, reset password and other pages.</p>

<div style="width: 980px" class="wp-video"><video class="wp-video-shortcode" id="video-0-1" width="980" height="551" preload="metadata" controls="controls"><a href="https://woocommerce.com/wp-content/uploads/2026/02/ShopDefenderPromo.mp4">https://woocommerce.com/wp-content/uploads/2026/02/ShopDefenderPromo.mp4</a></video></div>
<p> </p>
<hr class="wccom-product-heading__hr" />
<p></p>
<h2>Key Benefits</h2>
<ul class="wccom-tick-list-primary">
<li><strong>Stop Fraud Before Payment</strong> – Block fraudulent orders at checkout before any money changes hands</li>
<li><strong>100% Local — No External APIs</strong> – All fraud checks run on your server. No data leaves your site, no third-party dependencies, no per-transaction fees</li>
<li><strong>Flexible Response Actions</strong> – Block suspicious orders outright, place them on hold for review, or flag them for attention — your rules, your call</li>
<li><strong>Intelligent Risk Scoring</strong> – Automatic fraud detection with disposable email detection, IP tracking, country mismatch analysis, and more</li>
</ul>
<p></p>
<h2>Main Features</h2>
<ul class="wccom-tick-list-secondary">
<li><strong>Custom Blocking Rules</strong> – Create rules targeting emails, domains, phones, IPs, countries, addresses, names, payment methods, and shipping methods</li>
<li><strong>4 Matching Modes</strong> – Exact match, contains, wildcard patterns, and full regex support</li>
<li><strong>Automatic Risk Scoring</strong> – 6 configurable risk signals with adjustable weights and thresholds</li>
<li><strong>Classic & Blocks Checkout</strong> – Full protection for both WooCommerce checkout experiences</li>
<li><strong>Order Risk Metabox</strong> – Color-coded risk badges, scores, and detailed risk factors on every order</li>
<li><strong>Complete Audit Trail</strong> – Every fraud check logged with context, action, trigger, score, and metadata</li>
<li><strong>WooCommerce Analytics Integration</strong> – Security Logs report directly in the WooCommerce Analytics dashboard</li>
<li><strong>GDPR & Privacy Ready</strong> – Built-in privacy policy integration with transparent data handling</li>
</ul>
<p></p>
<div class="">
<div class="">
<h3>Rule-Based Blocking</h3>
<p>Build your own defense with powerful, flexible rules. Target orders by email address, domain, phone number, IP address, country, city, postcode, billing or shipping address, customer name, payment method, or shipping method. Choose from exact match, contains, wildcard, or regex matching. Set rules to block, hold, or flag — and add expiration dates for temporary rules.</p>
</div>
<div class="">
<h3>Intelligent Risk Scoring</h3>
<p>Every order is automatically assessed against six configurable risk signals: disposable email detection, IP reputation tracking, billing/shipping country mismatch, suspicious address keywords, new account age, and high-value order thresholds. Each signal has an adjustable weight, and you set the thresholds that determine whether an order is blocked, held, or flagged.</p>
</div>
<div class="">
<h3>Real-Time Checkout Protection</h3>
<p>Shop Defender intercepts fraudulent orders at the earliest possible moment — before payment is processed. Full support for both the classic WooCommerce checkout and the newer WooCommerce Blocks checkout. When an order is blocked, draft orders are automatically cleaned up and the customer sees your customizable error message.</p>
</div>
<div class="">
<h3>Order Risk Assessment</h3>
<p>Every order gets a detailed risk assessment stored as metadata. A dedicated metabox on the order page shows a color-coded badge (blocked, on hold, flagged, or low risk), a visual risk score bar, and a breakdown of every risk factor that contributed to the score. Optionally display a fraud risk column directly on the orders list.</p>
</div>
</div>
<p></p>
<h2>How It Works</h2>
<ol>
<li><strong>Install & Activate</strong> – Upload the plugin and activate it alongside WooCommerce</li>
<li><strong>Enable Protection</strong> – Navigate to WooCommerce > Settings > Advanced > Shop Defender and enable the plugin</li>
<li><strong>Configure Risk Thresholds</strong> – Adjust signal weights and set your block/hold score thresholds</li>
<li><strong>Create Rules (Optional)</strong> – Add custom rules for known bad actors, risky domains, or suspicious patterns</li>
<li><strong>Monitor & Review</strong> – Review flagged orders, check risk scores, and refine your rules using the audit log</li>
</ol>
<p></p>
<h2>Comprehensive Rule Types</h2>
<p>Target fraud from every angle:</p>
<ul class="wccom-tick-list-secondary">
<li><strong>Email & Domain</strong> – Block specific addresses or entire domains (e.g., *@disposable.com)</li>
<li><strong>Phone Number</strong> – Normalized matching strips formatting differences automatically</li>
<li><strong>IP Address</strong> – Block known bad IPs with exact or pattern matching</li>
<li><strong>Country, State, City & Postcode</strong> – Geographic restrictions for billing and shipping</li>
<li><strong>Billing & Shipping Address</strong> – Catch suspicious address patterns like PO boxes</li>
<li><strong>Customer Name</strong> – Block known fraudulent names with case-insensitive matching</li>
<li><strong>Payment Method</strong> – Restrict specific payment methods for flagged contexts</li>
<li><strong>Shipping Method</strong> – Route orders based on chosen shipping options</li>
</ul>
<p></p>
<h2>Configurable Risk Signals</h2>
<p>Fine-tune fraud detection with six adjustable signals:</p>
<ul class="wccom-tick-list-secondary">
<li><strong>Disposable Email Detection</strong> – Bundled database of 5,000+ known disposable email domains (default: +30 points)</li>
<li><strong>Failed IP Tracking</strong> – Flag IPs with a history of blocked orders in a configurable lookback period (default: +20 points)</li>
<li><strong>Country Mismatch</strong> – Detect when billing and shipping countries differ (default: +15 points)</li>
<li><strong>Suspicious Address Keywords</strong> – Configurable keyword list for risky address patterns like PO boxes (default: +10 points)</li>
<li><strong>New Account Detection</strong> – Flag orders from recently created accounts (default: +10 points, configurable age threshold)</li>
<li><strong>High-Value Order Alerts</strong> – Extra scrutiny for orders above a configurable amount (default: +15 points, $300 threshold)</li>
</ul>
<p></p>
<h2>Three Response Actions</h2>
<p>Choose the right response for every situation:</p>
<ul class="wccom-tick-list-secondary">
<li><strong>Block</strong> – Hard deny at checkout. Payment is never processed. The customer sees your customizable error message. Draft orders are automatically deleted.</li>
<li><strong>Hold</strong> – The order is placed on hold for manual review. An admin note is added with full risk details. You decide whether to approve or cancel.</li>
<li><strong>Flag</strong> – The order completes normally but is marked with a warning. A note and risk score are attached for your review when fulfilling.</li>
</ul>
<p></p>
<h2>Complete Audit Trail</h2>
<p>Every fraud check is logged for accountability and analysis:</p>
<ul class="wccom-tick-list-secondary">
<li><strong>Full Context Logging</strong> – Context (checkout, order), action taken, trigger type (rule or heuristic), risk score, and metadata</li>
<li><strong>Advanced Filtering</strong> – Filter logs by context, action, email, IP address, or order ID</li>
<li><strong>Automatic Retention</strong> – Daily WP-Cron task prunes logs older than your configured retention period (default: 90 days)</li>
<li><strong>Analytics Integration</strong> – Access a dedicated Security Logs report in WooCommerce > Analytics with date filtering and sorting</li>
<li><strong>Manual Management</strong> – Delete specific log entries or prune by age at any time</li>
</ul>
<p></p>
<h2>Powerful Admin Interface</h2>
<p>Everything you need, right inside WooCommerce:</p>
<ul class="wccom-tick-list-secondary">
<li><strong>Modern React UI</strong> – Fast, responsive settings interface built with WordPress components</li>
<li><strong>Risk Metabox</strong> – Color-coded badges, visual score bars, and risk factor breakdowns on every order</li>
<li><strong>Orders List Column</strong> – Optional fraud risk column with risk level badges and scores</li>
<li><strong>Customizable Messages</strong> – Edit the customer-facing block message and admin hold note templates</li>
<li><strong>Capability-Based Access</strong> – Configure which user role can manage Shop Defender settings</li>
<li><strong>Debug Mode</strong> – Enable detailed logging to the WooCommerce debug log for troubleshooting</li>
</ul>
<p></p>
<h2>Privacy & GDPR Compliance</h2>
<p>Transparent data handling built into the core:</p>
<ul class="wccom-tick-list-secondary">
<li><strong>Privacy Policy Integration</strong> – Automatic suggested privacy policy text added to WordPress Privacy settings</li>
<li><strong>Local Processing Only</strong> – No data sent to external services. All checks run entirely on your server.</li>
<li><strong>Configurable Retention</strong> – Set how long logs are kept (1–365 days) with automatic daily cleanup</li>
<li><strong>Data Transparency</strong> – Clear documentation of what data is collected, why, and how long it is stored</li>
<li><strong>Clean Uninstall</strong> – Optional removal of all plugin data (tables, options, order metadata) on uninstall</li>
</ul>
<p></p>
<h2>Seamless Integration</h2>
<p>Works with your existing WooCommerce setup:</p>
<ul class="wccom-tick-list-secondary">
<li><strong>WooCommerce HPOS</strong> – Fully compatible with High-Performance Order Storage</li>
<li><strong>Classic & Blocks Checkout</strong> – Full protection for both checkout experiences</li>
<li><strong>Multisite Ready</strong> – Per-site rule and log isolation on WordPress multisite networks</li>
<li><strong>WooCommerce Analytics</strong> – Dedicated Security Logs report in the Analytics dashboard</li>
<li><strong>REST API</strong> – Full CRUD API for rules, logs, and settings for programmatic management</li>
<li><strong>Developer Hooks</strong> – Actions and filters to extend fraud decisions, risk signals, and disposable domain lists</li>
<li><strong>Any Theme</strong> – Admin-only plugin with no frontend output — works with any theme</li>
</ul>

Shop Defender

<p>Stop losing revenue to fraudulent orders and chargebacks. Shop Defender catches bad actors before payment is processed — using custom rules, intelligent risk scoring, and disposable email detection — all running locally on your server with no third-party fees or data sharing.</p>

Google reCaptcha vs Shop Defender