Branching Software Order Fraud Protection for WooCommerce

Branching Software Order Fraud Protection for WooCommerce stops card testing, fraud orders, and repeat offenders before they reach your payment gateway. Blacklist customers by email address, email domain, phone number, name, IP address, or billing/shipping address, with wildcard rules, automatic blacklisting after repeated failed attempts, CSV import, complete fraud logs, and a safe Test Mode to preview every rule before it blocks anyone.

No monthly fees. No per-order quotas. No customer data sent to third-party services: all fraud detection runs on your own server.

Why store owners choose this fraud plugin

• Transparent blocking: every blocked checkout is logged with the exact reason, so you always know why an order was stopped. No black-box scores, no mystery false positives.
• Actually free: name, address, phone, IP, email, and wildcard blacklisting, auto-blocking, CSV import, Test Mode, and full logs are all included. Nothing here is a locked teaser.
• Test Mode first: enable any rule in simulation and watch what it would block before it touches a real customer.
• Built for modern WooCommerce: HPOS (High-Performance Order Storage) and block-based checkout fully supported.

Key Features

Blacklisting

Block customers at checkout by any combination of:

• Email address, email domain, or email wildcard (e.g. block all @frauddomain.com or any email containing spam)
• Phone number
• Customer name
• IP address
• Billing or shipping address (full or partial match, with wildcard support)

Admin Controls

• Set a custom block message shown to blocked customers at checkout
• Configure a fraud attempt threshold to automatically blacklist customers after N failed attempts
• “Blacklist Order” and “Remove from Blacklist” order actions directly on the order edit screen
• Bulk blacklist customers from the orders list page
• CSV bulk import for blacklist entries
• Whitelist trusted payment gateways (bypass checks for specific gateways)
• Whitelist specific customer emails (always allow through)

Blocking Rules

• Block by order status: choose which statuses trigger blacklist checks
• Block by product type: configure which product types are included in checks

Test / Simulation Mode

• Enable Test Mode to log blocked customers without actually blocking them. Safe for testing on live sites

Dashboard Widget

• At-a-glance Fraud Protection Summary widget on the WordPress admin dashboard
• Shows blocks this week, fraud attempts this month, and top 5 blocked reasons
• Quick links to the blocked logs and fraud attempts log pages
• Natively moveable and dismissible via WordPress Screen Options

Logging & Monitoring

• Admin fraud logs page showing all blocked customers with reason, date, IP, and address
• Database logging of fraud attempts to track repeat offenders
• Admin email alert when a blocked order is attempted (configurable address)
• Debug log option for troubleshooting

Security

• Log files protected with .htaccess (denies direct HTTP access on Apache and Nginx)
• SQL injection prevention via prepared statements throughout
• CSRF (nonce) protection on all admin form submissions
• Capability checks (manage_woocommerce) on all admin actions
• No sensitive data exposed via HTTP responses

Pro version (coming soon)

Order Fraud Protection Pro is launching soon with advanced defenses for stores facing card testing and organized fraud:

• Country blocking (block list or allow list)
• Velocity rules: limit checkout attempts per IP or email
• Transparent 0-100 risk scoring, with a color-coded Risk column on your orders list and a “why flagged” panel on every order
• Checkout bot protection: an invisible honeypot plus your choice of Cloudflare Turnstile, Google reCAPTCHA v2 or v3, or hCaptcha
• Instant block notifications for Slack, Discord, Microsoft Teams, Google Chat, or any JSON webhook (Zapier, Make, n8n)
• Daily fraud digest email

Everything runs on your own server, with the same transparent rules and Test Mode as the free plugin. Join the Pro waitlist to get launch pricing when it ships.

Credits

This plugin is based on the original Woo Manage Fraud Orders plugin (GPLv2 or later) originally developed by Prasidhda Malla, sranzan, and BrianHenryIE. The original plugin is no longer maintained and has been closed on WordPress.org. If you previously used it, your existing blacklists and settings carry over automatically when you activate this plugin. This version has been significantly extended and improved by Branching Software.