<div style="width: 980px" class="wp-video"><video class="wp-video-shortcode" id="video-0-1" width="980" height="551" preload="metadata" controls="controls"><a href="https://woocommerce.com/wp-content/uploads/2026/02/ShopDefenderPromo.mp4">https://woocommerce.com/wp-content/uploads/2026/02/ShopDefenderPromo.mp4</a></video></div>
<p> </p>
<hr class="wccom-product-heading__hr" />
<p></p>
<h2>Key Benefits</h2>
<ul class="wccom-tick-list-primary">
<li><strong>Stop Fraud Before Payment</strong> – Block fraudulent orders at checkout before any money changes hands</li>
<li><strong>100% Local — No External APIs</strong> – All fraud checks run on your server. No data leaves your site, no third-party dependencies, no per-transaction fees</li>
<li><strong>Flexible Response Actions</strong> – Block suspicious orders outright, place them on hold for review, or flag them for attention — your rules, your call</li>
<li><strong>Intelligent Risk Scoring</strong> – Automatic fraud detection with disposable email detection, IP tracking, country mismatch analysis, and more</li>
</ul>
<p></p>
<h2>Main Features</h2>
<ul class="wccom-tick-list-secondary">
<li><strong>Custom Blocking Rules</strong> – Create rules targeting emails, domains, phones, IPs, countries, addresses, names, payment methods, and shipping methods</li>
<li><strong>4 Matching Modes</strong> – Exact match, contains, wildcard patterns, and full regex support</li>
<li><strong>Automatic Risk Scoring</strong> – 6 configurable risk signals with adjustable weights and thresholds</li>
<li><strong>Classic & Blocks Checkout</strong> – Full protection for both WooCommerce checkout experiences</li>
<li><strong>Order Risk Metabox</strong> – Color-coded risk badges, scores, and detailed risk factors on every order</li>
<li><strong>Complete Audit Trail</strong> – Every fraud check logged with context, action, trigger, score, and metadata</li>
<li><strong>WooCommerce Analytics Integration</strong> – Security Logs report directly in the WooCommerce Analytics dashboard</li>
<li><strong>GDPR & Privacy Ready</strong> – Built-in privacy policy integration with transparent data handling</li>
</ul>
<p></p>
<div class="">
<div class="">
<h3>Rule-Based Blocking</h3>
<p>Build your own defense with powerful, flexible rules. Target orders by email address, domain, phone number, IP address, country, city, postcode, billing or shipping address, customer name, payment method, or shipping method. Choose from exact match, contains, wildcard, or regex matching. Set rules to block, hold, or flag — and add expiration dates for temporary rules.</p>
</div>
<div class="">
<h3>Intelligent Risk Scoring</h3>
<p>Every order is automatically assessed against six configurable risk signals: disposable email detection, IP reputation tracking, billing/shipping country mismatch, suspicious address keywords, new account age, and high-value order thresholds. Each signal has an adjustable weight, and you set the thresholds that determine whether an order is blocked, held, or flagged.</p>
</div>
<div class="">
<h3>Real-Time Checkout Protection</h3>
<p>Shop Defender intercepts fraudulent orders at the earliest possible moment — before payment is processed. Full support for both the classic WooCommerce checkout and the newer WooCommerce Blocks checkout. When an order is blocked, draft orders are automatically cleaned up and the customer sees your customizable error message.</p>
</div>
<div class="">
<h3>Order Risk Assessment</h3>
<p>Every order gets a detailed risk assessment stored as metadata. A dedicated metabox on the order page shows a color-coded badge (blocked, on hold, flagged, or low risk), a visual risk score bar, and a breakdown of every risk factor that contributed to the score. Optionally display a fraud risk column directly on the orders list.</p>
</div>
</div>
<p></p>
<h2>How It Works</h2>
<ol>
<li><strong>Install & Activate</strong> – Upload the plugin and activate it alongside WooCommerce</li>
<li><strong>Enable Protection</strong> – Navigate to WooCommerce > Settings > Advanced > Shop Defender and enable the plugin</li>
<li><strong>Configure Risk Thresholds</strong> – Adjust signal weights and set your block/hold score thresholds</li>
<li><strong>Create Rules (Optional)</strong> – Add custom rules for known bad actors, risky domains, or suspicious patterns</li>
<li><strong>Monitor & Review</strong> – Review flagged orders, check risk scores, and refine your rules using the audit log</li>
</ol>
<p></p>
<h2>Comprehensive Rule Types</h2>
<p>Target fraud from every angle:</p>
<ul class="wccom-tick-list-secondary">
<li><strong>Email & Domain</strong> – Block specific addresses or entire domains (e.g., *@disposable.com)</li>
<li><strong>Phone Number</strong> – Normalized matching strips formatting differences automatically</li>
<li><strong>IP Address</strong> – Block known bad IPs with exact or pattern matching</li>
<li><strong>Country, State, City & Postcode</strong> – Geographic restrictions for billing and shipping</li>
<li><strong>Billing & Shipping Address</strong> – Catch suspicious address patterns like PO boxes</li>
<li><strong>Customer Name</strong> – Block known fraudulent names with case-insensitive matching</li>
<li><strong>Payment Method</strong> – Restrict specific payment methods for flagged contexts</li>
<li><strong>Shipping Method</strong> – Route orders based on chosen shipping options</li>
</ul>
<p></p>
<h2>Configurable Risk Signals</h2>
<p>Fine-tune fraud detection with six adjustable signals:</p>
<ul class="wccom-tick-list-secondary">
<li><strong>Disposable Email Detection</strong> – Bundled database of 5,000+ known disposable email domains (default: +30 points)</li>
<li><strong>Failed IP Tracking</strong> – Flag IPs with a history of blocked orders in a configurable lookback period (default: +20 points)</li>
<li><strong>Country Mismatch</strong> – Detect when billing and shipping countries differ (default: +15 points)</li>
<li><strong>Suspicious Address Keywords</strong> – Configurable keyword list for risky address patterns like PO boxes (default: +10 points)</li>
<li><strong>New Account Detection</strong> – Flag orders from recently created accounts (default: +10 points, configurable age threshold)</li>
<li><strong>High-Value Order Alerts</strong> – Extra scrutiny for orders above a configurable amount (default: +15 points, $300 threshold)</li>
</ul>
<p></p>
<h2>Three Response Actions</h2>
<p>Choose the right response for every situation:</p>
<ul class="wccom-tick-list-secondary">
<li><strong>Block</strong> – Hard deny at checkout. Payment is never processed. The customer sees your customizable error message. Draft orders are automatically deleted.</li>
<li><strong>Hold</strong> – The order is placed on hold for manual review. An admin note is added with full risk details. You decide whether to approve or cancel.</li>
<li><strong>Flag</strong> – The order completes normally but is marked with a warning. A note and risk score are attached for your review when fulfilling.</li>
</ul>
<p></p>
<h2>Complete Audit Trail</h2>
<p>Every fraud check is logged for accountability and analysis:</p>
<ul class="wccom-tick-list-secondary">
<li><strong>Full Context Logging</strong> – Context (checkout, order), action taken, trigger type (rule or heuristic), risk score, and metadata</li>
<li><strong>Advanced Filtering</strong> – Filter logs by context, action, email, IP address, or order ID</li>
<li><strong>Automatic Retention</strong> – Daily WP-Cron task prunes logs older than your configured retention period (default: 90 days)</li>
<li><strong>Analytics Integration</strong> – Access a dedicated Security Logs report in WooCommerce > Analytics with date filtering and sorting</li>
<li><strong>Manual Management</strong> – Delete specific log entries or prune by age at any time</li>
</ul>
<p></p>
<h2>Powerful Admin Interface</h2>
<p>Everything you need, right inside WooCommerce:</p>
<ul class="wccom-tick-list-secondary">
<li><strong>Modern React UI</strong> – Fast, responsive settings interface built with WordPress components</li>
<li><strong>Risk Metabox</strong> – Color-coded badges, visual score bars, and risk factor breakdowns on every order</li>
<li><strong>Orders List Column</strong> – Optional fraud risk column with risk level badges and scores</li>
<li><strong>Customizable Messages</strong> – Edit the customer-facing block message and admin hold note templates</li>
<li><strong>Capability-Based Access</strong> – Configure which user role can manage Shop Defender settings</li>
<li><strong>Debug Mode</strong> – Enable detailed logging to the WooCommerce debug log for troubleshooting</li>
</ul>
<p></p>
<h2>Privacy & GDPR Compliance</h2>
<p>Transparent data handling built into the core:</p>
<ul class="wccom-tick-list-secondary">
<li><strong>Privacy Policy Integration</strong> – Automatic suggested privacy policy text added to WordPress Privacy settings</li>
<li><strong>Local Processing Only</strong> – No data sent to external services. All checks run entirely on your server.</li>
<li><strong>Configurable Retention</strong> – Set how long logs are kept (1–365 days) with automatic daily cleanup</li>
<li><strong>Data Transparency</strong> – Clear documentation of what data is collected, why, and how long it is stored</li>
<li><strong>Clean Uninstall</strong> – Optional removal of all plugin data (tables, options, order metadata) on uninstall</li>
</ul>
<p></p>
<h2>Seamless Integration</h2>
<p>Works with your existing WooCommerce setup:</p>
<ul class="wccom-tick-list-secondary">
<li><strong>WooCommerce HPOS</strong> – Fully compatible with High-Performance Order Storage</li>
<li><strong>Classic & Blocks Checkout</strong> – Full protection for both checkout experiences</li>
<li><strong>Multisite Ready</strong> – Per-site rule and log isolation on WordPress multisite networks</li>
<li><strong>WooCommerce Analytics</strong> – Dedicated Security Logs report in the Analytics dashboard</li>
<li><strong>REST API</strong> – Full CRUD API for rules, logs, and settings for programmatic management</li>
<li><strong>Developer Hooks</strong> – Actions and filters to extend fraud decisions, risk signals, and disposable domain lists</li>
<li><strong>Any Theme</strong> – Admin-only plugin with no frontend output — works with any theme</li>
</ul>

Shop Defender

<p>Stop losing revenue to fraudulent orders and chargebacks. Shop Defender catches bad actors before payment is processed — using custom rules, intelligent risk scoring, and disposable email detection — all running locally on your server with no third-party fees or data sharing.</p>

<p><strong>Boost conversions and reduce fraud and payment processing fees by displaying only the payment gateways that users trust and are most familiar with.</strong></p>
<hr />
<h2>Conditional payment methods = lower risk, higher sales</h2>
<p>Not all payment gateways are equal. Some work better for fraud reduction, some have lower fees, and some have higher acceptance from customers.</p>
<p>Conditional Payment Methods for WooCommerce adds restriction rules for available payment gateways during checkout. You can hide/show any payment method (<strong>including custom payment methods</strong>).</p>
<p><strong>Available conditions to restrict payment methods:</strong></p>
<ul>
<li>Billing address (location) – country, state, city, postcode</li>
<li>Shipping address (location) – country, state, city, postcode</li>
<li>User – logged-in or guest</li>
<li>User role – admin, customer, subscriber and more</li>
<li>Customer’s cart subtotal</li>
<li>Product type – virtual, downloadable and any custom product type</li>
<li>Product category</li>
<li>Product visibility – featured, out of stock…</li>
<li>Product tags</li>
<li>Custom product taxonomies like brands (except attributes)</li>
</ul>
<p><strong>Set up all conditions with a simple screen within WooCommerce</strong>, so there’s no need to hire a developer or work with custom code.</p>
<figure id="attachment_5172855" aria-describedby="caption-attachment-5172855" style="width: 980px" class="wp-caption aligncenter"><img class="aligncenter size-full wp-image-18734004495487" src="https://woocommerce.com/wp-content/uploads/2020/01/conditional-payment-methods-for-woocommerce-settings-1-1.png" alt="Conditional Payment Methods for WooCommerce Settings" width="980" height="555" /><figcaption id="caption-attachment-5172855" class="wp-caption-text">Restrict available payment methods during WooCommerce checkout</figcaption></figure>
<hr />
<h2>Why enable conditional payment methods?</h2>
<p>Quite a few reasons…</p>
<ul>
<li><strong>Show gateways people know and trust:</strong> PayPal, Stripe, Square, Authorize.net, Google Pay, Amazon Pay, Apple Pay… when people see them, they feel safe and secure — and don’t abandon their carts.</li>
<li><strong>Local payment methods increase conversion:</strong> Offering a payment gateway popular in specific geography significantly increases conversion because it makes potential customers more comfortable. But showing this gateway to all other customers might be confusing and counterproductive. Making it conditional gives you all the benefits without confusion.</li>
<li><strong>Minimize frauds, refunds, and chargebacks:</strong> Certain locations have higher fraud rates and some payment methods make it easier for customers to dispute transactions than others, costing you much more than the original order money. Disabling payment methods that are problematic in certain situations can lower your risk.</li>
<li><strong>Lower fees for you:</strong> Some gateways charge high fees for international transactions. Using a direct bank transfer may be better for higher-value orders, lowering your costs and increasing your profits.</li>
<li><strong>Choices, but not overwhelm:</strong> It makes sense to offer customers different options for payment, but showing them every possible option during checkout can increase confusion — and therefore abandonment. Conditionally showing relevant payment methods (keeping less active payment methods) solves this problem.</li>
</ul>
<blockquote><p>Given that 12% of customers will abandon their cart if the checkout process is too complicated, choosing the wrong payment gateway can hurt your sales numbers – <strong>Chris Lema</strong></p></blockquote>
<h2>Use Conditional Payment Methods for hundreds of applications</h2>
<p>They can be tailored to various industries, customer preferences, and unique business requirements.</p>
<ul>
<li>Show only Stripe, PayPal and Square for subscription products.</li>
<li>Hide all payment gateways except for Cash on Delivery in rural areas based on zip codes.</li>
<li>Enable <strong>SagePay if you sell across Europe.</strong></li>
<li>Disable Stripe and Amazon payments in some African countries where they are not used.</li>
<li><strong>Enable CCAvenue, Google Pay in India.</strong></li>
<li>Allow only Direct Bank Transfer for payments above $1500.</li>
<li>Accept payments via credit cards only for brands like Nike, Adidas, Skechers and other popular ones.</li>
<li>Accept payments only via <strong>PayPal and Stripe for products from Fashion and Electronics categories.</strong></li>
<li>Hide Cash on Delivery for your featured products.</li>
<li>Hide Cash on Delivery, Check Payments for virtual & downloadable products.</li>
<li>Accept payments via Eventbrite Payment Processing for paid events (product type should be Events) in the US.</li>
<li><strong>Accept cryptocurrency payments through Coinbase Commerce</strong>, except Singapore and countries restricted by the Office of Foreign Assets Control (OFAC).</li>
<li>Enable <strong>Alipay and WeChat Pay</strong> as payment methods for customers in <strong>China</strong>.</li>
<li>Offer Buy Now Pay Later options like Afterpay and Klarna for installment payments, especially if you are selling courses.</li>
<li><strong>Offer PayPal Credit for financing options in the US</strong>.</li>
<li>Enable Stripe ACH Payments in the US for direct bank account payments.</li>
<li>Enable PayPal One Touch for Asian countries like Singapore, Malaysia, Philippines, Indonesia, and Thailand.</li>
<li>Offer <strong>“Boleto Bancário”</strong> as a payment option through <strong>Stripe for customers in Brazil</strong>.</li>
<li>Enable PayPal.Me for customers in the UK.</li>
<li>Enable Swish through Stripe for instant payments using mobile phone numbers in Sweden.</li>
<li>Offer <strong>PayPal Afterpay for customers in Australia</strong> to split payments into installments.</li>
<li>Enable Stripe Konbini for purchases at convenience stores in Japan.</li>
<li>Accept payments using <strong>Moneris in Canada</strong>.</li>
<li>Offer iDEAL as a payment method through Stripe for customers in the Netherlands.</li>
<li>Offer PayPal Lastschrift (direct debit) as a payment option for customers in Germany.</li>
<li>Restrict credit card payments in high-fraud-risk countries.</li>
</ul>
<p>and many more…</p>
<h2>More rule types coming soon</h2>
<ul>
<li>Restrictions based on custom checkout fields</li>
<li>Conditional rules based on customer’s “geolocation” based on IP address</li>
<li>Restrict based on coupons applied in the cart</li>
<li>What else would you like us to add? <a href="https://woocommerce.com/feature-requests/conditional-payment-methods-for-woocommerce/" target="_blank" rel="noopener">Let us know</a>!</li>
</ul>
<hr />
<p>Conditional Payment Methods is made by one of the most reputed WooCommerce extension development teams — StoreApps. You can trust the product, and know you’ll get excellent support and help when required.</p>
<p><a href="https://woocommerce.com/vendor/storeapps/">Check out our other best-selling and popular plugins on WooCommerce</a>.</p>
<hr class="woo-sc-hr" />

Conditional Payment Methods

<p><span style="font-weight: 400">Show or hide payment methods based on the customer’s billing address, shipping address, order total, user role and other product taxonomies. Show Cash on Delivery for low-priced orders, Stripe for subscription products, and more.</span></p>

Shop Defender vs Conditional Payment Methods