<h2>Security for WooCommerce:</h2>
<p>Fraudsters often use VPNs and proxies to hide their identities, putting eCommerce businesses at risk. <strong data-start="102" data-end="130">Security for WooCommerce</strong> helps you detect and block high-risk transactions by identifying masked locations and restricting purchases from countries you don’t sell to. While it strengthens your store’s security, it does not protect against velocity attacks. For advanced fraud prevention, check out <a href="//woocommerce.com/products/woocommerce-anti-fraud/" rel="noopener" data-start="404" data-end="431"> Anti-Fraud for Woocommerce</a>.</p>
<h2><strong>Key Features</strong></h2>
<div class="two-columns">
<p></p>
<div class="twocol-one">
<h3><strong>Restrict Sales to a Single Country</strong></h3>
<p>If your business operates domestically, you can limit sales to a single country to focus on your target market and block unwanted traffic from other regions.</p>
<p><img class="alignnone wp-image-18734004756467" src="https://woocommerce.com/wp-content/uploads/2022/11/AllowOnlyTrafficFromCountry.webp?w=896" alt="Allow Only Traffic From one Country" width="693" height="390" /></p>
</div>
<div class="twocol-one">
<h3><strong>Manually Allow or Block Individual IP Addresses</strong></h3>
<p>With<strong> Security for WooCommerce,</strong> you can manually manage IP access by blocking suspicious users or allowing trusted ones. Add problematic IPs to the Blacklist to prevent fraud, or Whitelist trusted users like admins or virtual assistants for seamless access. This ensures secure, controlled access while protecting your store.<img class="alignnone wp-image-18734004756439" src="https://woocommerce.com/wp-content/uploads/2022/11/RandomIps.webp?w=896" alt="restrict access to cart at checkout" width="693" height="390" /><br />
<strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Restrict Access to Cart and Checkout</strong></p>
<p>Enhances security by allowing you to restrict access to the cart and checkout pages based on a visitor’s country.</p>
<p><img class="alignnone wp-image-18734004756362" src="https://woocommerce.com/wp-content/uploads/2022/11/RestrictAccess.webp?w=896" alt="" width="693" height="390" /></p>
<h3><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Restrict Access at the Product Level</strong></h3>
<p>Strengthens security by allowing you to restrict access to a product based on a visitor’s country.</p>
<p><img class="alignnone wp-image-18734004756380" src="https://woocommerce.com/wp-content/uploads/2022/11/AccessAtProductLevel.webp?w=896" alt="" width="693" height="390" /></p>
<h3><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Category-Based Product Restrictions</strong></h3>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Allows precise control over product visibility by region. The </span><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Category<br />
Restrictions On/Off </strong><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">setting enables or disables category-based blocking, while </span><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Block Products by Category </strong><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">lets you restrict specific WooCommerce product categories for visitors from blocked countries, ensuring compliance and a tailored shopping experience.</span></p>
<p><img class="alignnone wp-image-18734004756400" src="https://woocommerce.com/wp-content/uploads/2022/11/CategoryOnOff.webp?w=896" alt="" width="693" height="390" /></p>
<h3><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">For Publicly Accessible Download Product Links</strong></h3>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Secure your downloadable products with IP-based access control. Choose <strong>Whitelist Mode</strong> to block specific IPs or <strong>Blacklist Mode</strong> to allow only approved IPs. Custom error messages ensure unauthorized downloads are prevented, providing extra protection and control for your WooCommerce store.</span></p>
<p><img class="alignnone wp-image-18734004756395" src="https://woocommerce.com/wp-content/uploads/2022/11/PublicAccessibleDownloadlinks.webp?w=896" alt="whitelisting and blacklisting toggles" width="693" height="390" /></p>
<div class="flex max-w-full flex-col flex-grow">
<div class="min-h-8 text-message flex w-full flex-col items-end gap-2 whitespace-normal break-words text-start [.text-message+&]:mt-5" dir="auto" data-message-author-role="assistant" data-message-id="ae4271fb-4acd-4aa0-bca9-25faed52bb26" data-message-model-slug="gpt-4o">
<div class="flex w-full flex-col gap-1 empty:hidden first:pt-[3px]">
<div class="markdown prose w-full break-words dark:prose-invert light">
<p><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Block Visitors Access between Timeframe</strong></p>
</div>
</div>
</div>
</div>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Enables you to restrict order placement to specific timeframes, ideal for stores serving a particular country or region and aiming to prevent orders from unintended time zones or areas.</span></p>
<p><img class="alignnone wp-image-18734004756413" src="https://woocommerce.com/wp-content/uploads/2022/11/RestrictTimeFrame.webp?w=896" alt="block visitors access between timeframe toggle and time range" width="693" height="390" /></p>
<h3><strong style="font-family: var(--wccom-font-family-header);font-size: var(--wp--preset--font-size--paragraph-medium,18px);letter-spacing: -0.02em">Enhanced Site Protection</strong></h3>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em;font-size: 16px">The comprehensive WooCommerce Security plugin includes features to enhance site protection. It can hide the WordPress version number to prevent attackers from identifying version-specific vulnerabilities. Two-Factor Authentication (2FA) adds an extra layer of security by requiring a second verification step. Additionally, a passcode protection feature allows restricted access using a configured username and password. All features are disabled by default.</span></p>
</div>
<div class="twocol-one">
<div class="flex max-w-full flex-col flex-grow">
<p><img class="alignnone wp-image-18734004756423" src="https://woocommerce.com/wp-content/uploads/2022/11/EnhancedSiteProteciton.webp?w=896" alt="enhanced site protection toggles" width="693" height="390" /></p>
<div class="flex max-w-full flex-col flex-grow">
<div class="min-h-8 text-message flex w-full flex-col items-end gap-2 whitespace-normal break-words text-start [.text-message+&]:mt-5" dir="auto" data-message-author-role="assistant" data-message-id="ae4271fb-4acd-4aa0-bca9-25faed52bb26" data-message-model-slug="gpt-4o">
<div class="flex w-full flex-col gap-1 empty:hidden first:pt-[3px]">
<div class="markdown prose w-full break-words dark:prose-invert light">
<p><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Scan Malware Manually</strong></p>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Enables on-demand malware scans for your WordPress site, detecting security threats, suspicious code, and compromised files. Users can initiate a detailed scan with one click, receiving results that include the last scan date, infected files with suspected line numbers, and total threats found. The scanner checks PHP files, detects malicious patterns, and compares files against malware signatures, with results stored in the WordPress database and displayed in a table.</span></p>
</div>
</div>
</div>
</div>
<p><img class="alignnone wp-image-18734004756432" src="https://woocommerce.com/wp-content/uploads/2022/11/ScanMalware.webp?w=896" alt="scan malware manually button" width="693" height="390" /></p>
<div class="flex max-w-full flex-col flex-grow">
<div class="min-h-8 text-message flex w-full flex-col items-end gap-2 whitespace-normal break-words text-start [.text-message+&]:mt-5" dir="auto" data-message-author-role="assistant" data-message-id="ae4271fb-4acd-4aa0-bca9-25faed52bb26" data-message-model-slug="gpt-4o">
<div class="flex w-full flex-col gap-1 empty:hidden first:pt-[3px]">
<div class="markdown prose w-full break-words dark:prose-invert light"><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Directory and File Protection Settings</strong></div>
<div>These features help keep your site’s folders and files private and secure.<strong> Directory Listing Protection</strong> blocks people from browsing your folders, while <strong>File Indexing Protection</strong> prevents search engines from displaying sensitive files. Together, they keep your file structure hidden and your content safe. Both are off by default but can be easily turned on for extra security.</div>
<div><img class="alignnone wp-image-18734004756429" src="https://woocommerce.com/wp-content/uploads/2022/11/PreventDirectory.webp?w=896" alt="Prevent direct access directory on/off toggle" width="693" height="390" /></div>
</div>
</div>
</div>
<div class="group/conversation-turn relative flex w-full min-w-0 flex-col agent-turn">
<div class="flex-col gap-1 md:gap-3">
<div class="flex max-w-full flex-col flex-grow">
<div class="min-h-8 text-message flex w-full flex-col items-end gap-2 whitespace-normal break-words text-start [.text-message+&]:mt-5" dir="auto" data-message-author-role="assistant" data-message-id="7ba194b5-e21f-46a2-9ae8-e3f0af69f4c8" data-message-model-slug="gpt-4o">
<div class="flex w-full flex-col gap-1 empty:hidden first:pt-[3px]">
<div class="markdown prose w-full break-words dark:prose-invert light">
<p>The comprehensive <strong>Security for WooCommerce</strong> plugin ensures your website remains discoverable by allowing trusted search engine bots to index your site, even if they originate from blocked countries. You’ll receive <strong>email alerts</strong> whenever a blocked visitor attempts to log in via WP-Admin. Designed to help WooCommerce businesses block unwanted traffic, this plugin allows you to focus on serving genuine customers.</p>
<p><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Block Visitors Access between Timeframe</strong></p>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Empowers you to restrict order placement to specific timeframes, ideal for stores serving a particular country or region and aiming to prevent orders from unintended time zones or areas.</span></p>
<p><img class="alignnone wp-image-18734004756413" src="https://woocommerce.com/wp-content/uploads/2022/11/RestrictTimeFrame.webp?w=896" alt="Block visitors access between timeframe toggle" width="693" height="390" /></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<div class="twocol-one last"></div>
</div>

Security

<h3>Stop Location Spoofing & Block VPN/Proxy Fraudsters</h3>

<ul class="wccom-tick-list-primary">
<li><b>Block Customers by Name</b> ― <span style="font-weight: 400">Instantly stop suspicious purchases by filtering out known or repeat-offender names.</span></li>
<li><b>Email Address Blacklisting</b> ― <span style="font-weight: 400">Automatically reject orders from flagged email addresses to prevent spam and fraud. Block individual emails, whole domains, or use wildcards to catch any variation — no fraudulent order gets through.</span></li>
<li><b>Phone Number Filtering</b> ― <span style="font-weight: 400">Block transactions from phone numbers linked to previous fraud or abuse.</span></li>
<li><b>Custom Rule Combinations</b> ― <span style="font-weight: 400">Combine name, email, and phone filters to build precise, flexible blocking rules.</span></li>
</ul>
<hr />
<h2>Why Block Fraudulent Orders in WooCommerce?</h2>
<p><span style="font-weight: 400">Fraud, spam, and repeat refund abusers can quietly eat away at your profits. The WooCommerce Blacklist extension gives you full control over who can place orders — so you stop high-risk users before they ever reach checkout.</span></p>
<ul class="wccom-tick-list-secondary">
<li class="whitespace-normal break-words"><b>Reduce Chargebacks</b> — <span style="font-weight: 400">Block high-risk customers before they complete a purchase.</span></li>
<li class="whitespace-normal break-words"><b>Save on Processing Fees</b> — <span style="font-weight: 400">Avoid paying transaction costs or refunds on orders you know you’ll cancel.</span></li>
<li class="whitespace-normal break-words"><b>Protect Your Store’s Reputation</b> — <span style="font-weight: 400">Prevent chaos caused by fake customers and repeat offenders.</span></li>
<li class="whitespace-normal break-words"><b>Improve the Shopping Experience</b> — <span style="font-weight: 400">Prevent disruptions caused by spam orders and fake accounts abusing the checkout process.</span></li>
</ul>
<h2><b>How the WooCommerce Blacklist Plugin Works</b></h2>
<p class="whitespace-pre-wrap break-words"><span style="font-weight: 400">WooCommerce Blacklist is easy to set up and built for store owners — not developers. You can now enforce customer filtering rules without touching a line of code.</span></p>
<p><span style="font-weight: 400">It all happens behind the scenes, so your store stays secure and your customer experience seamless.</span></p>
<ul class="wccom-tick-list-secondary">
<li class="whitespace-normal break-words"><span style="font-weight: 400">Add names, email addresses, or phone numbers to your blacklist.</span></li>
<li class="whitespace-normal break-words"><span style="font-weight: 400">Combine multiple criteria for more advanced blocking rules.</span></li>
<li class="whitespace-normal break-words"><span style="font-weight: 400">The system automatically stops matching users during checkout — no manual review required.</span></li>
<li class="whitespace-normal break-words"><span style="font-weight: 400">Display a professional message when a customer is blocked.</span></li>
</ul>
<h2><b>Built for Store Owners</b></h2>
<p><span style="font-weight: 400">WooCommerce Blacklist doesn’t just protect your store—it does it gracefully.</span></p>
<p><span style="font-weight: 400">Deliver a professional experience, even when blocking access. You can show custom messages to blocked users, explaining why they can’t complete a purchase, helping you stay secure </span><i><span style="font-weight: 400">and</span></i><span style="font-weight: 400"> customer-friendly.</span></p>
<p><img class="alignnone wp-image-18734005091830 size-medium" src="https://woocommerce.com/wp-content/uploads/2025/03/Screenshot-2025-03-26-115347.png?w=896" alt="WooCommerce checkout screen showing blocked customer error message from Blacklist plugin" width="896" height="699" /></p>
<h2 class="text-xl font-bold text-text-200 mt-1 -mb-0.5">Fully Compatible with WooCommerce Blocks</h2>
<p class="whitespace-pre-wrap break-words"><span style="font-weight: 400">Blacklist for WooCommerce works seamlessly with both the classic WooCommerce checkout and the newer WooCommerce Blocks checkout. No matter which version you use, protection remains consistent and reliable. </span><span style="font-weight: 400"><br />
</span><span style="font-weight: 400"><br />
</span><span style="font-weight: 400">No extra setup required.</span></p>
<h2>How to Block Fraudulent Customers Automatically on WooCommerce</h2>
<div class="wp-block-columns is-layout-flex" style="align-items: center !important">
<div class="wp-block-column" style="flex-basis: 35%"><img class="alignnone" src="https://woocommerce.com/wp-content/uploads/2025/03/blacklist-for-woocommerce-block-customers-by-name.png?w=300" alt="Blocked customer name example in WooCommerce Blacklist plugin" width="300" height="184" /></div>
<div class="wp-block-column" style="flex-basis: 55%">
<h2><b>Name-Based Blocking</b></h2>
<p><span style="font-weight: 400">Prevent repeat offenders or abusive customers from placing orders by blocking purchases based on full name. This is ideal for dealing with individuals who use multiple email addresses but the same name across transactions. </span></p>
</div>
</div>
<div class="wp-block-columns is-layout-flex" style="align-items: center !important">
<div class="wp-block-column" style="flex-basis: 35%"><img class="alignnone" src="https://woocommerce.com/wp-content/uploads/2025/03/blacklist-for-woocommerce-email-address-blacklisting.png?w=300" alt="Blocked email address example in WooCommerce Blacklist plugin" width="300" height="184" /></div>
<div class="wp-block-column" style="flex-basis: 55%">
<h2><b>Email Address Filtering</b></h2>
<p><span style="font-weight: 400">Block specific email addresses or entire domains to prevent spam orders in WooCommerce, fake signups, and fraudulent accounts. Great for preventing abuse from disposable or blacklisted email providers. You can also add wildcard rules to block all emails from a specific domain name at once.</span></p>
</div>
</div>
<div class="wp-block-columns is-layout-flex" style="align-items: center !important">
<div class="wp-block-column" style="flex-basis: 35%"><img class="alignnone" src="https://woocommerce.com/wp-content/uploads/2025/03/blacklist-for-woocommerce-phone-number-filtering.png?w=300" alt="Blocked phone number example in WooCommerce Blacklist plugin" width="300" height="184" /></div>
<div class="wp-block-column" style="flex-basis: 55%">
<h2><b>Phone Number Screening</b></h2>
<p><span style="font-weight: 400">Identify and block transactions tied to suspicious or high-risk phone numbers. Especially useful when names or emails vary, but the buyer reuses the same phone across orders. </span></p>
</div>
</div>
<div class="wp-block-columns is-layout-flex" style="align-items: center !important">
<div class="wp-block-column" style="flex-basis: 35%"><img class="alignnone" src="https://woocommerce.com/wp-content/uploads/2025/03/blacklist-users-based-on-ip-address.png?w=300" alt="Blacklist users based on their IP Address" width="300" height="184" /></div>
<div class="wp-block-column" style="flex-basis: 55%">
<h2><b>Block by IP Address</b></h2>
<p><span style="font-weight: 400">You can block specific IP addresses to prevent unwanted purchases from particular users or locations. This blocking feature is especially useful for stopping fraudulent transactions, preventing repeated chargebacks, restricting access from certain geographic regions, or blocking automated bot attacks that attempt to exploit your payment system.</span></p>
</div>
</div>
<div class="wp-block-columns is-layout-flex" style="align-items: center !important">
<div class="wp-block-column" style="flex-basis: 35%"><img class="alignnone" src="https://woocommerce.com/wp-content/uploads/2025/03/activity-log.png?w=300" alt="Track all purchase attempts from banned users" width="300" height="184" /></div>
<div class="wp-block-column" style="flex-basis: 55%">
<h2><b>Track Blocked Purchase Attempts</b></h2>
<p><span style="font-weight: 400">Check your logs to identify blacklisted users who attempted to make purchases. This monitoring is particularly useful for tracking behavioral patterns, identifying repeat offenders, detecting coordinated fraud attempts, and gathering data to refine your blocking strategies.</span></p>
</div>
</div>
<div class="wp-block-columns is-layout-flex" style="align-items: center !important">
<div class="wp-block-column" style="flex-basis: 35%"><img class="alignnone" src="https://woocommerce.com/wp-content/uploads/2025/03/display-a-custom-message-to-blocked-users.png?w=300" alt="Track all purchase attempts from banned users" width="300" height="184" /></div>
<div class="wp-block-column" style="flex-basis: 55%">
<h2><b>Add your Custom Ban Message</b></h2>
<p><span style="font-weight: 400">Customize the message displayed to blocked users to maintain professional customer relationships. Instead of revealing the actual ban reason, you can craft polite, diplomatic messages that preserve your brand reputation while still preventing unwanted transactions.</span></p>
</div>
</div>
<div class="wp-block-columns is-layout-flex" style="align-items: center !important">
<div class="wp-block-column" style="flex-basis: 35%"><img class="alignnone" src="https://woocommerce.com/wp-content/uploads/2025/03/order-metabox-for-instant-blocking.png?w=300" alt="You can enable the metabox within the orders page to instantly block any user by Full Name, Phone Number, or IP Address directly from their order details" width="300" height="184" /></div>
<div class="wp-block-column" style="flex-basis: 55%">
<h2><b>Enable Metabox Within Orders Page</b></h2>
<p><span style="font-weight: 400">You can enable the metabox within the orders page to instantly block any user by Full Name, Phone Number, or IP Address directly from their order details. This convenient feature streamlines your workflow by eliminating the need to navigate to separate settings pages when you identify problematic customers.</span></p>
</div>
</div>
<div class="wp-block-columns is-layout-flex" style="align-items: center !important">
<div class="wp-block-column" style="flex-basis: 35%"><img class="alignnone" src="https://woocommerce.com/wp-content/uploads/2025/03/blacklist-for-woocommerce-custom-rule-combinations.png?w=300" alt="Blacklist users based on their IP Address" width="300" height="184" /></div>
<div class="wp-block-column" style="flex-basis: 55%">
<h2><b>Custom Rules Combinations</b></h2>
<p><span style="font-weight: 400">Combine filters for name, email, and phone to create powerful, flexible rules tailored to your business. Block customers using any combination and fine-tune your settings for highly targeted customer restrictions in WooCommerce.<br />
</span></p>
</div>
</div>
<h2>Ready to take control of your checkout?</h2>
<p>WooCommerce Blacklist is already helping stores like yours prevent fake orders, chargebacks, and unnecessary support headache</p>
<p>Start blocking fraudulent customers today — and keep bad buyers out while protecting your profits.</p>

Blacklist

<p><strong>Take control of who shops in your store.</strong></p>
<p>WooCommerce Blacklist lets you block specific customers by email, phone number, or full name — stopping spam orders, fraud, and repeat offenders before they reach checkout.</p>
<p>Protect your business from chargebacks, abusive buyers, and fake orders with a powerful, flexible tool built for proactive fraud prevention in WooCommerce.</p>

Security vs Blacklist