<p>StoreGuard provides <strong>enterprise-grade IP rate limiting</strong> for WooCommerce stores of any size. By restricting the number of actions any single IP address can perform within a specific time window, StoreGuard automatically blocks malicious activity while maintaining a smooth experience for legitimate customers.</p>
<p>Whether you’re fighting registration spam, brute-force login attacks, comment spam, review spam, card testing fraud, or checkout abuse, <strong>StoreGuard has comprehensive protection for all critical WooCommerce functions</strong>.</p>
<ul>
<li>
<p data-path-to-node="5,0,0"><b data-path-to-node="5,0,0" data-index-in-node="0">The Card-Testing Nightmare:</b> Card testing (bots trying thousands of stolen credit cards on a checkout page) can cause payment gateway bans, thousands of dollars in chargeback fees, and lost API access. Frame StoreGuard as the <b data-path-to-node="5,0,0" data-index-in-node="225">“Ultimate Anti-Chargeback & Fraud Shield.”</b></p>
</li>
<li>
<p data-path-to-node="5,1,0"><b data-path-to-node="5,1,0" data-index-in-node="0">The Inventory / Server Crash Angle:</b> Emphasize that brute-force bot signups and rapid checkouts slow down servers or lock up stock, causing real customers to abandon carts.</p>
</li>
<li>
<p id="p-rc_349793f5862b7a8d-23" data-path-to-node="5,2,0"><b data-path-to-node="5,2,0" data-index-in-node="0">The Peace of Mind : </b><i data-path-to-node="5,2,0" data-index-in-node="41">Stop payment fraud before it hits your gateway. <span class="citation-4">Save thousands in chargeback fees for just $29/year.</span></i></p>
</li>
</ul>
<h2><strong>7 Independent Rate Limiters</strong></h2>
<p><strong>1. Registration Protection</strong> — Stop registration spam and automated bot accounts. Limit signups per IP with customizable time windows and block durations. Recommended: 3 attempts per 60 minutes, block for 24 hours.</p>
<p><strong>2. Checkout Protection</strong> — Prevent payment fraud and checkout abuse. Covers classic forms, AJAX checkout, and WooCommerce Blocks. Recommended: 10 attempts per 60 minutes, block for 12 hours.</p>
<p><strong>3. Login Protection</strong> — Block brute-force password attacks across all login methods (WordPress login, WooCommerce account login, REST API, custom endpoints). Recommended: 5 failed attempts per 30 minutes, block for 60 minutes.</p>
<p><strong>4. Password Reset Protection</strong> — Prevent email enumeration attacks by limiting password reset requests per IP. Stop attackers from discovering valid email addresses in your system.</p>
<p><strong>5. Comment & Review Protection</strong> — Stop spam submissions on posts, pages, and product reviews. Configure independently for different limits on comments vs. reviews.</p>
<p><strong>6. Payment Method Protection</strong> — Reduce card testing attacks by limiting payment method additions per IP. Works with all WooCommerce payment gateways and REST API.</p>
<p><strong>7. IP Management</strong> — Whitelist trusted IPs (office, developers, partners), manually block suspicious IPs, and view all currently blocked IPs in your dashboard.</p>
<p><img class="alignleft size-medium wp-image-18734006514625" src="https://woocommerce.com/wp-content/uploads/2026/04/storeguard-frontend-blocked-900x675-1.png?w=896" alt="storeguard-frontend-blocked-900x675" width="896" height="672" /></p>
<h2><strong>Professional Features</strong></h2>
<p><strong>Security Monitoring</strong> — Dashboard widget shows recent blocks, detailed logs show exactly what was blocked and why, email notifications alert you immediately to suspicious activity.</p>
<p><strong>Flexible Configuration</strong> — 7 organized tabs in WooCommerce settings, recommended starting values provided for each limiter, fully customizable from dashboard, no coding required.</p>
<p><strong>Activity Logging</strong> — Comprehensive logs for each rate limiter type, block event history with timestamps, security audit trails, filter by IP address and action.</p>
<p><strong>Email Alerts</strong> — Real-time notifications when IPs are blocked, customizable email templates with placeholders, configure sender, subject, and body, enable/disable as needed.</p>
<h3>Why Choose StoreGuard?</h3>
<p><strong>Purpose-Built for WooCommerce</strong> — Designed specifically for WooCommerce security with native integration in WooCommerce settings.</p>
<p><strong>Safe by Default</strong> — All rate limiters are OFF by default. The plugin is completely passive until you deliberately enable only the protections you need.</p>
<p><strong>No Impact on Legitimate Customers</strong> — Whitelisting available for trusted IPs, generous attempt limits prevent false positives (5-10 attempts before blocking), high time windows (30-60 minutes), long block durations prevent permanent lockouts, manual unblocking available in seconds.</p>
<p><strong>Enterprise-Grade Protection Made Simple</strong> — Install in 2 minutes, configure in 5 minutes with provided recommendations, comprehensive documentation included, professional admin interface following WooCommerce standards.</p>

StoreGuard – IP Rate Limiter

<div>Protect your WooCommerce store from bots, brute-force attacks, and payment fraud with intelligent IP-based rate limiting. StoreGuard limits registrations, checkouts, logins, and payments per IP address—all configured directly in WooCommerce settings with recommended values provided.</div>

<div class="woo-sc-box info"><strong>Ready to secure your store?</strong> <a href="https://calendly.com/koalaapps-marketing/anti-fraud-shield-demo" target="_blank" rel="noopener">Book a free demo call</a> to learn more about Anti-Fraud Shield.</div>
<ul class="wccom-tick-list-primary">
<li><strong>Boost Security</strong> – Protect your WooCommerce store with advanced fraud prevention measures</li>
<li><strong>Customizable Protection</strong> – Define fraud rules tailored to your store’s unique needs</li>
<li><strong>Smart Risk Assessment</strong> – Assign weight to risk factors for precise fraud detection</li>
<li><strong>Role-Based Security</strong> – Restrict fraud rules by user roles, products, and categories</li>
<li><strong>Comprehensive Risk Factors</strong> – Analyze multiple fraud indicators for better security</li>
</ul>
<hr class="wccom-product-single__section-hr" />
<div class="woo-sc-box alert">To prevent your WooCommerce store from carding attacks and fraudulent transactions, it is highly advised to use Anti-Fraud Shield in combination with <a href="https://woocommerce.com/products/google-recaptcha-for-woocommerce/">Google reCaptcha for WooCommerce</a>.</div>
<p>The rise in fraudulent activities poses significant challenges for e-commerce business owners, such as fake orders and unauthorized purchases made using stolen card information. A study suggests that ecommerce stores all over the world lose over <a href="https://www.humansecurity.com/learn/blog/how-to-protect-e-commerce-sites-from-carding-attacks/" target="_blank" rel="noopener">$10 billion</a> to card testing attacks. The prevalence of fraudulent activities has reached a point where safeguarding your store from suspicious behavior is no longer a choice — it’s a requirement. These deceitful actions result in revenue losses and erode customer trust.</p>
<p>To combat fake orders and carding attempts, use Anti Fraud Shield for WooCommerce. This tool allows you to restrict risky orders by setting limitations based on factors such as IP addresses, unsafe countries, proxies, order duplication, and transaction thresholds. By establishing these parameters, you can create a more secure environment for your online store and protect it from potential threats.</p>
<h2>Use Cases – Multiple Ways to Combat Fraudulent Orders & Transactions</h2>
<ul>
<li>Flag orders based on mismatches between user roles and typical order patterns.</li>
<li>Detect and hold orders using email addresses from suspicious or temporary domains.</li>
<li>Verify PayPal emails to ensure payment sources are legitimate and not spoofed.</li>
<li>Automatically flag orders placed from high-risk or sanctioned countries.</li>
<li>Compare store and order countries to detect potential cross-border fraud attempts.</li>
<li>Cross-check billing and shipping countries to identify suspicious shipping behavior.</li>
<li>Detect use of proxies or VPNs by comparing IP address location with order details.</li>
<li>Identify and scrutinize first-time customers placing high-risk or unusual orders.</li>
<li>Prevent duplicate or identical orders placed within a short timeframe.</li>
<li>Monitor rapid order generation to detect bot attacks or coordinated fraud attempts.</li>
</ul>
<h2>Features</h2>
<ul>
<li>Protect your ecommerce store with advanced fraud prevention measures</li>
<li>Define multiple fraud prevention rules tailored to your specific needs</li>
<li>Assign weight to each risk factor for particular fraud detection</li>
<li>Restrict or apply fraud prevention rules by user roles, products, and categories</li>
<li>Select from a variety of risk factors to enhance security and assess risk based on:
<ul>
<li>User roles</li>
<li>Suspicious domains</li>
<li>Paypal email verification</li>
<li>High-risk countries</li>
<li>Store country v/s Order country</li>
<li>Billing country v/s shipping country</li>
<li>IP v/s Proxy</li>
<li>First order check</li>
<li>Order duplication</li>
<li>Rapid order generation</li>
<li>Number of order cancellations</li>
<li>Subtotal limit (minimum and maximum)</li>
<li>Order quantity limit (minimum and maximum)</li>
<li>High price products</li>
<li>Payment methods</li>
<li>Suspicious email domains</li>
<li>Suspicious addresses</li>
</ul>
</li>
<li>Categorize risk levels (low, medium, high) and define actions accordingly</li>
<li>Multiple risk level actions such as:
<ul>
<li>Do nothing</li>
<li>Accept order and notify admin</li>
<li>Accept order and change status</li>
<li>Reject order automatically</li>
</ul>
</li>
<li>Display a customizable error message for restricted users</li>
<li>Block specific email addresses from making transactions.</li>
<li>Restrict IP addresses using:
<ul>
<li>IP range (From-To)</li>
<li>Comma-separated specific IPs</li>
</ul>
</li>
<li>Blacklist specific addresses or lists of addresses automatically.</li>
<li>Customize email notifications to receive fraud risk reports.</li>
<li>Send separate admin alerts for detected fraudulent activities</li>
<li>Enhanced checkout protection with:
<ul>
<li><a href="https://woocommerce.com/products/google-recaptcha-for-woocommerce/">Google reCaptcha for WooCommerce</a> compatibility</li>
<li>Image-based captcha (Builtin)</li>
</ul>
</li>
<li>Maintain detailed logs of all suspicious activities for review</li>
</ul>
<h2>Provides Ultimate Protection against Fraudulent Activities</h2>
<p>The Anti-Fraud Shield for WooCommerce extension provides ultimate protection against fake orders, chargebacks, and card testing attempts. With over 16+ risk factors and options to block users permanently from placing an order, this extension is the ultimate safeguard against fraudulent order attempts.<br />
<img class="alignnone size-full wp-image-18734005201575" src="https://woocommerce.com/wp-content/uploads/2025/04/woocommerce-fraud-prevention-333.png" alt="" width="878" height="552" /></p>
<h2>Multiple risk factors to choose from</h2>
<p>This feature will create dynamic rules to manage all types of risk factors, such as:</p>
<div class="wccom-bundle-section-container">
<div class="wccom-bundle-section-content wccom-bundle-section-left">
<h4>Apply by product category and user role</h4>
<p>Merchants can restrict rule applications by product categories and user roles. Once the restriction is applied, the risk factors and fraud prevention rules will not be applied to the order if it contains selected user roles, products, or categories.</p>
</div>
<div class="wccom-bundle-section-image"><img src="https://woocommerce.com/wp-content/uploads/2025/04/woocommerce-anti-fraud-2.png?strip=all&w=900" alt="imagealt" /></div>
<div class="wccom-bundle-section-container">
<div class="wccom-bundle-section-content wccom-bundle-section-right">
<h4>Assign risk based on user region</h4>
<p>This feature allows you to restrict users based on their country or region. It helps prevent fraudulent activities by blocking high-risk countries where fake payments or orders are usually generated. You can also restrict access based on the store’s country, shipping country, billing country, and their associated IP addresses.</p>
</div>
<div class="wccom-bundle-section-image"><img class="alignnone size-full wp-image-18734004898525" src="https://woocommerce.com/wp-content/uploads/2025/04/woocommerce-anti-fraud-7.png?strip=all&w=900" alt="buy more save more for woocommerce" width="980" height="810" /></div>
</div>
</div>
<div class="wccom-bundle-section-container">
<div class="wccom-bundle-section-content wccom-bundle-section-left">
<h4>Assign risk based on user details</h4>
<p>Merchants can assign risk based on the user’s email, email domain, PayPal verification, and first-order check. Once the risk is assigned, our intelligent fraud prevention extension will take action based on your preferences for risky orders</p>
</div>
<div class="wccom-bundle-section-image"><img src="https://woocommerce.com/wp-content/uploads/2025/04/woocommerce-anti-fraud-3.png?strip=all&w=900" alt="imagealt" /></div>
<div class="wccom-bundle-section-container">
<div class="wccom-bundle-section-content wccom-bundle-section-right">
<h4>Assign risk based on cart and order content</h4>
<p>Restrict cart and order activity by preventing duplicate orders within a certain period and rapid order generation. You can block users in cases of fake order generation, frequent cancellations, or exceeding a specified subtotal limit. Moreover, you can apply restrictions on order quantity and high-priced products. Choose your preferred payment method, which enhances security and prevents fraudulent transactions.</p>
</div>
<div class="wccom-bundle-section-image"><img class="alignnone size-full wp-image-18734004898525" src="https://woocommerce.com/wp-content/uploads/2025/04/woocommerce-anti-fraud-4.png?strip=all&w=900" alt="buy more save more for woocommerce" width="980" height="810" /></div>
</div>
</div>
<div class="wccom-bundle-section-container">
<h2>Restrict the place order button by IP address, address, and emails</h2>
<p>Restrict the “Place Order” button based on various criteria, such as IP address, location (country, city, or street), and specific email addresses with this extension. If any user meets these conditions of restriction, they will be unable to complete the checkout process. When a restricted user clicks the checkout button to place an order, an error message is displayed at the top of the screen, informing them that they are restricted.</p>
<p><img class="alignnone size-full wp-image-18734005201709" src="https://woocommerce.com/wp-content/uploads/2025/04/woocommerce-anti-fraud-331.png" alt="" width="878" height="564" /></p>
<h2>Multiple Integrations for Extra Scrutiny</h2>
<p>Apart from built-in fraud prevention features, this extension is fully compatible with Google recaptcha for woocommerce for extra checkout protection. In addition to Google recaptcha, this extension contains a built-in image CAPTCHA for additional security.<br />
To prevent fake PayPal transactions, this extension includes PayPal email verification functionality, which informs you in real-time whether the PayPal email is verified or not. For additional IP scrutiny, merchants can utilize the built-in IPQualityScore API, which reports visits and orders associated with suspicious IP addresses. Moreover, the use of the SocialScanner API can help by reviewing a customer’s social media.</p>
<p><img class="alignnone size-full wp-image-18734005201712" src="https://woocommerce.com/wp-content/uploads/2025/04/woocommerce-anti-fraud-332.png" alt="" width="670" height="565" /></p>
<h2></h2>
<h2>Add Captcha to Make Checkout Extra Secure</h2>
<p>For an additional layer of security, this extension offers a built-in image-based captcha creator, which provides additional security against bot-based carding attempts. If you wish to use V2 or V3 of Google’s reCaptcha to tackle spam and carding attempts, this extension is fully compatible with Google reCaptcha for WooCommerce.</p>
<p><img class="alignnone size-full wp-image-18734005155963" src="https://woocommerce.com/wp-content/uploads/2025/04/woocommerce-fraud-prevention-1.png" alt="" width="879" height="855" /></p>
<h2>Customizable Risk Weight for Each Factor</h2>
<p>Merchants can configure anti-fraud rules as needed. By assigning weights to each factor, merchants can easily create the order scrutiny process as hard as they see fit. Assign weights from 1 to 10 to each factor; the higher the weight, the riskier the order. The combined weight of all factors equals a total risk score of 100.</p>
<p><img class="alignnone size-full wp-image-18734005201719" src="https://woocommerce.com/wp-content/uploads/2025/04/woocommerce-anti-fraud-335.png" alt="" width="980" height="431" /></p>
<h2>Decide actions to prevent fraud based on order risk</h2>
<p>It is entirely upto the merchants to decide what percentage of risk is considered low, medium, and high. Once the risk threshold percentages are added, merchants can easily decide what actions are to be taken in case of high and medium-risk orders. These actions are:</p>
<h3>Accept the order and notify the admin</h3>
<p>Once a medium/high-risk order is placed, the order will be accepted, and the admin will be notified via email of a medium/high-risk order.</p>
<h3>Reject order automatically</h3>
<p>Automatically rejects medium and high-risk orders; you can reinstate these orders from the order listing page.</p>
<h3>Accept order and change order status</h3>
<p>If this action is enabled, medium/high-risk orders will be accepted normally, but the order status will change so the admin can take suitable action later.</p>
</div>
<p><img class="alignnone size-full wp-image-18734005201717" src="https://woocommerce.com/wp-content/uploads/2025/04/woocommerce-anti-fraud-334.png" alt="" width="878" height="526" /></p>
<h2 style="text-align: left">Get notified of risk reports via email</h2>
<p>You can customize the email settings using this extension. It allows you to restrict users from sharing the risk report via email, helping to prevent fraudulent activities and orders. You can also restrict users from sending details of high-risk orders via email, ensuring that only the admin is separately informed.<br />
<img class="alignnone size-full wp-image-18734005201724" src="https://woocommerce.com/wp-content/uploads/2025/04/woocommerce-anti-fraud-336.png" alt="" width="874" height="563" /></p>
<h2>Comprehensive log to view all flagged users</h2>
<p>This WooCommerce Anti Fraud extension enables merchants to maintain logs of all flagged users. You can track the details of the flagged user by using the threat date, user ID, order ID, user email, total block score, and the reason for the block, and then take appropriate actions.</p>
<p><img class="alignnone size-full wp-image-18734005201727" src="https://woocommerce.com/wp-content/uploads/2025/04/woocommerce-anti-fraud-337.png" alt="" width="874" height="419" /></p>

Anti-Fraud Shield

<p>Shield your store from fraud, chargebacks, and card testing with real-time risk assessment using 16+ risk indicators.</p>

StoreGuard – IP Rate Limiter vs Anti-Fraud Shield