<div style="width: 980px" class="wp-video"><video class="wp-video-shortcode" id="video-0-1" width="980" height="551" preload="metadata" controls="controls"><a href="https://woocommerce.com/wp-content/uploads/2026/02/ShopDefenderPromo.mp4">https://woocommerce.com/wp-content/uploads/2026/02/ShopDefenderPromo.mp4</a></video></div>
 
<hr class="wccom-product-heading__hr" />

<h2>Key Benefits</h2>
<ul class="wccom-tick-list-primary">
<li>Stop Fraud Before Payment – Block fraudulent orders at checkout before any money changes hands</li>
<li>100% Local — No External APIs – All fraud checks run on your server. No data leaves your site, no third-party dependencies, no per-transaction fees</li>
<li>Flexible Response Actions – Block suspicious orders outright, place them on hold for review, or flag them for attention — your rules, your call</li>
<li>Intelligent Risk Scoring – Automatic fraud detection with disposable email detection, IP tracking, country mismatch analysis, and more</li>
</ul>

<h2>Main Features</h2>
<ul class="wccom-tick-list-secondary">
<li>Custom Blocking Rules – Create rules targeting emails, domains, phones, IPs, countries, addresses, names, payment methods, and shipping methods</li>
<li>4 Matching Modes – Exact match, contains, wildcard patterns, and full regex support</li>
<li>Automatic Risk Scoring – 6 configurable risk signals with adjustable weights and thresholds</li>
<li>Classic & Blocks Checkout – Full protection for both WooCommerce checkout experiences</li>
<li>Order Risk Metabox – Color-coded risk badges, scores, and detailed risk factors on every order</li>
<li>Complete Audit Trail – Every fraud check logged with context, action, trigger, score, and metadata</li>
<li>WooCommerce Analytics Integration – Security Logs report directly in the WooCommerce Analytics dashboard</li>
<li>GDPR & Privacy Ready – Built-in privacy policy integration with transparent data handling</li>
</ul>

<div class="">
<div class="">
<h3>Rule-Based Blocking</h3>
Build your own defense with powerful, flexible rules. Target orders by email address, domain, phone number, IP address, country, city, postcode, billing or shipping address, customer name, payment method, or shipping method. Choose from exact match, contains, wildcard, or regex matching. Set rules to block, hold, or flag — and add expiration dates for temporary rules.
</div>
<div class="">
<h3>Intelligent Risk Scoring</h3>
Every order is automatically assessed against six configurable risk signals: disposable email detection, IP reputation tracking, billing/shipping country mismatch, suspicious address keywords, new account age, and high-value order thresholds. Each signal has an adjustable weight, and you set the thresholds that determine whether an order is blocked, held, or flagged.
</div>
<div class="">
<h3>Real-Time Checkout Protection</h3>
Shop Defender intercepts fraudulent orders at the earliest possible moment — before payment is processed. Full support for both the classic WooCommerce checkout and the newer WooCommerce Blocks checkout. When an order is blocked, draft orders are automatically cleaned up and the customer sees your customizable error message.
</div>
<div class="">
<h3>Order Risk Assessment</h3>
Every order gets a detailed risk assessment stored as metadata. A dedicated metabox on the order page shows a color-coded badge (blocked, on hold, flagged, or low risk), a visual risk score bar, and a breakdown of every risk factor that contributed to the score. Optionally display a fraud risk column directly on the orders list.
</div>
</div>

<h2>How It Works</h2>
<ol>
<li>Install & Activate – Upload the plugin and activate it alongside WooCommerce</li>
<li>Enable Protection – Navigate to WooCommerce > Settings > Advanced > Shop Defender and enable the plugin</li>
<li>Configure Risk Thresholds – Adjust signal weights and set your block/hold score thresholds</li>
<li>Create Rules (Optional) – Add custom rules for known bad actors, risky domains, or suspicious patterns</li>
<li>Monitor & Review – Review flagged orders, check risk scores, and refine your rules using the audit log</li>
</ol>

<h2>Comprehensive Rule Types</h2>
Target fraud from every angle:
<ul class="wccom-tick-list-secondary">
<li>Email & Domain – Block specific addresses or entire domains (e.g., *@disposable.com)</li>
<li>Phone Number – Normalized matching strips formatting differences automatically</li>
<li>IP Address – Block known bad IPs with exact or pattern matching</li>
<li>Country, State, City & Postcode – Geographic restrictions for billing and shipping</li>
<li>Billing & Shipping Address – Catch suspicious address patterns like PO boxes</li>
<li>Customer Name – Block known fraudulent names with case-insensitive matching</li>
<li>Payment Method – Restrict specific payment methods for flagged contexts</li>
<li>Shipping Method – Route orders based on chosen shipping options</li>
</ul>

<h2>Configurable Risk Signals</h2>
Fine-tune fraud detection with six adjustable signals:
<ul class="wccom-tick-list-secondary">
<li>Disposable Email Detection – Bundled database of 5,000+ known disposable email domains (default: +30 points)</li>
<li>Failed IP Tracking – Flag IPs with a history of blocked orders in a configurable lookback period (default: +20 points)</li>
<li>Country Mismatch – Detect when billing and shipping countries differ (default: +15 points)</li>
<li>Suspicious Address Keywords – Configurable keyword list for risky address patterns like PO boxes (default: +10 points)</li>
<li>New Account Detection – Flag orders from recently created accounts (default: +10 points, configurable age threshold)</li>
<li>High-Value Order Alerts – Extra scrutiny for orders above a configurable amount (default: +15 points, $300 threshold)</li>
</ul>

<h2>Three Response Actions</h2>
Choose the right response for every situation:
<ul class="wccom-tick-list-secondary">
<li>Block – Hard deny at checkout. Payment is never processed. The customer sees your customizable error message. Draft orders are automatically deleted.</li>
<li>Hold – The order is placed on hold for manual review. An admin note is added with full risk details. You decide whether to approve or cancel.</li>
<li>Flag – The order completes normally but is marked with a warning. A note and risk score are attached for your review when fulfilling.</li>
</ul>

<h2>Complete Audit Trail</h2>
Every fraud check is logged for accountability and analysis:
<ul class="wccom-tick-list-secondary">
<li>Full Context Logging – Context (checkout, order), action taken, trigger type (rule or heuristic), risk score, and metadata</li>
<li>Advanced Filtering – Filter logs by context, action, email, IP address, or order ID</li>
<li>Automatic Retention – Daily WP-Cron task prunes logs older than your configured retention period (default: 90 days)</li>
<li>Analytics Integration – Access a dedicated Security Logs report in WooCommerce > Analytics with date filtering and sorting</li>
<li>Manual Management – Delete specific log entries or prune by age at any time</li>
</ul>

<h2>Powerful Admin Interface</h2>
Everything you need, right inside WooCommerce:
<ul class="wccom-tick-list-secondary">
<li>Modern React UI – Fast, responsive settings interface built with WordPress components</li>
<li>Risk Metabox – Color-coded badges, visual score bars, and risk factor breakdowns on every order</li>
<li>Orders List Column – Optional fraud risk column with risk level badges and scores</li>
<li>Customizable Messages – Edit the customer-facing block message and admin hold note templates</li>
<li>Capability-Based Access – Configure which user role can manage Shop Defender settings</li>
<li>Debug Mode – Enable detailed logging to the WooCommerce debug log for troubleshooting</li>
</ul>

<h2>Privacy & GDPR Compliance</h2>
Transparent data handling built into the core:
<ul class="wccom-tick-list-secondary">
<li>Privacy Policy Integration – Automatic suggested privacy policy text added to WordPress Privacy settings</li>
<li>Local Processing Only – No data sent to external services. All checks run entirely on your server.</li>
<li>Configurable Retention – Set how long logs are kept (1–365 days) with automatic daily cleanup</li>
<li>Data Transparency – Clear documentation of what data is collected, why, and how long it is stored</li>
<li>Clean Uninstall – Optional removal of all plugin data (tables, options, order metadata) on uninstall</li>
</ul>

<h2>Seamless Integration</h2>
Works with your existing WooCommerce setup:
<ul class="wccom-tick-list-secondary">
<li>WooCommerce HPOS – Fully compatible with High-Performance Order Storage</li>
<li>Classic & Blocks Checkout – Full protection for both checkout experiences</li>
<li>Multisite Ready – Per-site rule and log isolation on WordPress multisite networks</li>
<li>WooCommerce Analytics – Dedicated Security Logs report in the Analytics dashboard</li>
<li>REST API – Full CRUD API for rules, logs, and settings for programmatic management</li>
<li>Developer Hooks – Actions and filters to extend fraud decisions, risk signals, and disposable domain lists</li>
<li>Any Theme – Admin-only plugin with no frontend output — works with any theme</li>
</ul>

Shop Defender

Stop losing revenue to fraudulent orders and chargebacks. Shop Defender catches bad actors before payment is processed — using custom rules, intelligent risk scoring, and disposable email detection — all running locally on your server with no third-party fees or data sharing.

<h2>Invoice Payments — Smart, Controlled, and Automated</h2>
Give your customers the flexibility to order now and pay later while you stay in complete control of when invoice payment is available.
• Show or hide the invoice payment method based on user roles, specific customers, or guest users. 
• Restrict availability by country, state, city, or ZIP code. 
• Control access using cart totals, quantity limits, shipping methods, or selected products. 
• Collect Purchase Order (PO) numbers and optional notes directly at checkout. 
• Automatically generate branded PDF invoices and attach them to emails.
<h3>How It Works</h3>
Invoice Payment Method works in two simple layers — basic activation and optional rule-based control.
<ol start="1">
<li>Enable & Start Accepting Invoice Orders Simply enable the invoice payment method from WooCommerce settings, customize the title, description, and order status — and customers can immediately select “Pay by Invoice” at checkout. No complex setup required.</li>
<li>Optional Rule-Based Restrictions If needed, you can create rules to control when the invoice option appears. The system evaluates customer type, location, cart value, products, quantities, and shipping methods in real time to determine eligibility. If the conditions are met, the invoice option is displayed. If not, it remains hidden.</li>
<li>Automated Invoice Processing Once selected, the plugin captures PO numbers and optional notes, assigns the configured order status, generates a branded PDF invoice, and attaches it to customer and admin emails automatically. After configuration, everything runs instantly at checkout, whether you use simple activation or advanced restrictions.</li>
</ol>
<h3>Features</h3>
<ol start="1">
<li>Role-Based Invoice Access 
Show or hide the invoice payment method for specific user roles, individual customers, or guest users (e.g., allow wholesalers, block retail customers).</li>
<li>Geo-Targeted Invoice Control 
Restrict invoice payments by country, state, city, or ZIP code (e.g., enable invoices only for domestic B2B customers).</li>
<li>Cart & Product Condition Rules 
Enable invoice payments based on cart total, quantity, selected products, categories, tags, or shipping methods (e.g., allow invoices only for orders above $500).</li>
<li>PO Number & Checkout Notes 
Collect required or optional PO numbers and allow customers to add notes directly at checkout (e.g., require PO for wholesale orders or include internal instructions).</li>
<li>Automated Branded PDF Invoices 
Generate professional PDF invoices instantly with customizable templates, numbering, and logos (e.g., include terms, footer notes, and company branding).</li>
<li>Email Attachment Automation 
Attach invoice PDFs to customer and admin emails automatically (e.g., reduce manual processing and improve communication).</li>
<li>Flexible Payment Settings 
Customize checkout title, description, thank-you message, and default order status from WooCommerce settings (e.g., control display without touching code).</li>
</ol>
Payment Method Settings
Enable or disable the invoice payment option, customize its title, description, thank-you message, and set the default order status from WooCommerce settings (e.g., show “Pay by Invoice” only for B2B customers or rename it to “Invoice Payment”).<img class="alignnone size-medium wp-image-18734005536105" alt="" /> <img class="alignnone size-medium wp-image-18734006387715" src="https://woocommerce.com/wp-content/uploads/2026/02/invoice-payment-settings.png?w=896" alt="" width="896" height="595" />
<h3>General Settings</h3>
Quickly configure the checkout fields used with the invoice payment method. Enable a Purchase Order (PO) number field and allow customers to add a message for the admin when placing an order.
You can customize field labels, placeholders, and decide whether the PO number should be required or optional. These settings act as global defaults and can also be customized separately inside individual rules for more advanced control.
<img class="alignnone size-medium wp-image-18734006387920" src="https://woocommerce.com/wp-content/uploads/2026/02/invoice-payment-general-settings-1.png?w=896" alt="" width="896" height="587" />
<h3>PDF Invoice Settings</h3>
Automatically generate professional PDF invoices for orders placed using the invoice payment method. Choose from three built-in invoice templates, including Simple Classic, Modern Minimal, and Professional Bold.
You can further customize invoices with your company logo, invoice numbering prefix, company details, headings, colors, terms and conditions, and footer notes, ensuring every invoice reflects your brand while maintaining a clean professional layout.
You can check out design of each PDF template here:
<ul>
<li><a href="https://woocommerce.com/wp-content/uploads/2026/02/invoice-payment-pdf-template1-preview.png" target="_blank" rel="noopener">View PDF template 1</a></li>
<li><a href="https://woocommerce.com/wp-content/uploads/2026/02/invoice-payment-pdf-template2-preview.png" target="_blank" rel="noopener">View PDF template 2</a></li>
<li><a href="https://woocommerce.com/wp-content/uploads/2026/02/invoice-payment-pdf-template3-preview.png" target="_blank" rel="noopener">View PDF template 3</a></li>
</ul>
<img class="alignnone size-medium wp-image-18734006387932" src="https://woocommerce.com/wp-content/uploads/2026/02/invoice-payment-pdf1.png?w=896" alt="" width="896" height="593" /><img class="alignnone size-medium wp-image-18734006387968" src="https://woocommerce.com/wp-content/uploads/2026/02/invoice-payment-pdf2.png?w=896" alt="" width="896" height="593" />
<h4 class="ds-markdown-paragraph">Invoice Access Settings</h4>
Control how invoice PDFs are shared with customers and administrators. Automatically attach invoices to customer emails, include them in admin notification emails, and allow customers to download their invoices directly from the My Account orders page.
These options ensure invoices are always accessible while keeping the order workflow smooth and organized.
<img class="alignnone size-medium wp-image-18734006387969" src="https://woocommerce.com/wp-content/uploads/2026/02/invoice-payment-invoice-access.png?w=896" alt="" width="896" height="332" />
<h4 data-section-id="1or3co6">Flexible Invoice Payment Rules</h4>
Create multiple rules to control when the invoice payment method appears at checkout. Each rule can be enabled or disabled individually and assigned a priority to determine which rule should apply first when multiple conditions are met.
This allows store owners to tailor invoice payments for different business scenarios without modifying code.
<img class="alignnone size-medium wp-image-18734006387975" src="https://woocommerce.com/wp-content/uploads/2026/02/invoice-payment-rule.png?w=896" alt="" width="896" height="350" />
<h4 data-section-id="b6g0uj">Customer & Location Targeting</h4>
Control invoice payment availability based on user roles, specific customers, or guest users. You can also restrict access by country, state, city, or ZIP code, allowing invoice payments only in approved regions or for selected customer groups.
This makes it easy to offer invoice payments to trusted B2B customers or specific markets while keeping the option hidden from others.
<img class="alignnone size-medium wp-image-18734006388622" src="https://woocommerce.com/wp-content/uploads/2026/02/invoice-payment-location-rule.png?w=896" alt="" width="896" height="573" />
<h4>Order & Checkout Conditions</h4>
Define conditions based on cart total, quantity limits, shipping methods, products, categories, tags, or brands to determine when invoice payments should be available.
Rules can also override the global checkout field settings, allowing you to require PO numbers, enable customer messages, or apply different field behavior depending on the rule.
<img class="alignnone size-medium wp-image-18734006388628" src="https://woocommerce.com/wp-content/uploads/2026/02/invoice-payment-checkout-rule.png?w=896" alt="" width="896" height="573" />
<h3>Front-end View</h3>
The invoice payment method appears along with other payment methods on the front-end. 
<img class="alignnone size-medium wp-image-18734006388707" src="https://woocommerce.com/wp-content/uploads/2026/02/invoice-payment-frontend.png?w=896" alt="" width="896" height="493" />
<h4>Scenario 1: Invoice Payments for Wholesale Customers</h4>
Description:
You want to allow trusted wholesale or B2B customers to place orders using invoice payment, while regular customers must use standard payment methods like credit cards or PayPal.
Rule Configuration:
<ul>
<li>Target: User Role = Wholesale Customer</li>
<li>Rule Settings:
<ul>
<li data-section-id="gzl6k8">Enable Rule: Enabled</li>
<li data-section-id="penmml">User Restriction: Select Wholesale Customer role</li>
<li data-section-id="59lh4w">Extra Fields: Enable Purchase Order (PO) Number</li>
<li data-section-id="gddxvv">Shipping Methods: Leave empty (applies to all)</li>
<li data-section-id="10awgt0">Countries / States: Leave empty (applies to all)</li>
</ul>
</li>
<li>Result: Only customers with the Wholesale Customer role will see the Invoice Payment option during checkout, and they will be required to provide a PO Number when placing the order.</li>
</ul>
<h4>Scenario 2: Invoice Payment for Specific Countries</h4>
Description:
Some international customers may require invoice payments due to local banking restrictions or company purchasing processes.
Rule Configuration:
<ul>
<li>Target: Countries = [Your Desired list]</li>
<li>Actions:
<ul>
<li data-section-id="gzl6k8">Enable Rule: Enabled</li>
<li data-section-id="k8p8dm">Countries: Germany, United Arab Emirates, Singapore</li>
<li data-section-id="1fg3t0k">Extra Fields: Enable PO Number</li>
<li data-section-id="v1dd7l">Shipping Methods: All methods</li>
</ul>
</li>
<li>Result: Customers from the selected countries will see the Invoice Payment option at checkout, allowing them to place orders and complete payment later via invoice.</li>
</ul>

Invoice Payment Method

Add a flexible pay-by-invoice option to WooCommerce. Let customers order now and pay later while you control availability using advanced rules based on users, location, cart value, products, and shipping methods.

Shop Defender vs Invoice Payment Method