Bot Protector for PayPal for WooCommerce helps store owners automatically block bot attacks, checkout spam, card-testing, and PayPal checkout abuse that generates repeated failed orders.
This plugin monitors suspicious traffic hitting:
- PayPal checkout requests
wc-ajax=checkout- WooCommerce Store API endpoints
- Automated card-testing sequences
It then blocks them based on:
- Adaptive rate limiting
- Automatic IP banning
- User-agent and referer validation
- Optional Cloudflare Turnstile CAPTCHA
- Logging and monitoring
No setup required — activate it and your store is instantly protected.
External services
This plugin connects to Cloudflare Turnstile API to verify CAPTCHA responses when the Turnstile feature is enabled. This service is used to validate that checkout attempts are made by humans rather than bots.
When Turnstile is enabled, the plugin sends the CAPTCHA response token to Cloudflare’s servers for verification. This occurs during checkout validation when a customer submits the checkout form with a Turnstile widget.
This service is provided by Cloudflare: Terms of Service, Privacy Policy
Features
- Lightweight bot firewall for PayPal checkout
- Rate limiting per IP
- Temporary automatic IP bans
- Blocks REST-based checkout attacks
- Blocks PayPal card-testing bots
- Turnstile CAPTCHA support
- Whitelist trusted IP addresses
- Admin log viewer
- No performance impact
- Works with all PayPal gateways for WooCommerce
Donations
Support continued development ❤️
https://www.paypal.com/ncp/payment/EP3HAP53U4MFU
Screenshots
Settings panel
Logs page