Woke up to thousands of $1 failed transactions and a Stripe account warning?
KossLabs Anti-Carding & Bot Shield halts automated card testing attacks directly at your checkout before malicious requests hit payment gateways (Stripe, PayPal, Authorize.net) and trigger expensive authorization fees ($0.15 – $0.50 per attempt).
Works out of the box with zero configuration:
– Instant Protection: Honeypot, HMAC timestamp validation, and RAM-based IP rate limiting are active immediately upon activation.
– Cloudflare Turnstile Ready (BYOK): Optional frictionless bot challenge with zero vendor lock-in.
– Dual-Shield Architecture: Fully compatible with Classic Checkout and modern WooCommerce Checkout Blocks (Store API).
– Zero Bloat: Runs entirely in RAM (Transients API / Redis / Memcached). No custom database tables.
Privacy Policy & External Services
This plugin integrates with Cloudflare Turnstile to protect your checkout against card testing and automated bot abuse.
- Service: Cloudflare Turnstile
- Provider: Cloudflare, Inc.
- Service Description: Frictionless, privacy-preserving bot detection challenge.
- Terms of Service: https://www.cloudflare.com/website-terms/
- Privacy Policy: https://www.cloudflare.com/privacypolicy/
- Data Transmitted: During checkout, the customer’s IP address and Turnstile response token are transmitted to Cloudflare’s validation endpoint (
https://challenges.cloudflare.com/turnstile/v0/siteverify) to verify whether the submission is from a legitimate human. Store owners use their own Cloudflare account credentials (BYOK).