Checkout Guard – Block Fake Orders, Spam & Fraud for WooCommerce
Stop fake and unwanted WooCommerce orders before they happen. Checkout Guard is a WooCommerce fraud prevention plugin that blocks spam orders and suspicious checkouts using simple rules you control, with no external fraud service, no scoring engine, and no monthly fee. Often you already know what yo
About this tool.
Stop fake and unwanted WooCommerce orders before they happen. Checkout Guard is a WooCommerce fraud prevention plugin that blocks spam orders and suspicious checkouts using simple rules you control, with no external fraud service, no scoring engine, and no monthly fee.
Often you already know what you want to block: a throwaway email domain, a repeat offender’s IP, a country you don’t ship to. Checkout Guard puts those controls directly in your WooCommerce checkout.
Requires: WooCommerce .
Works with: the classic checkout, the WooCommerce Checkout block, most express payment buttons, and HPOS.
🛡️ Block throwaway email services
Switch on one setting and Checkout Guard rejects checkouts from around 22,000 known disposable-email domains : Mailinator, Guerrilla Mail, YOPmail, Temp-Mail and thousands more. The list ships with the plugin, so it works the moment you enable it, with no signup and no API key.
🛡️ Block by email address, domain or pattern
Block individual addresses or whole domains, with wildcard support:
- *@bad-domain.com blocks every address at that domain
- spam*@bad-domain.com blocks spammer@bad-domain.com but leaves nice@bad-domain.com alone
- *.edu blocks every address ending in that TLD
Catch-all entries such as * or *@* would block every order on your store, so they are rejected when you save.
🛡️ Reject junk names
Catches checkouts where the name is obviously not a name: test , asdf , qwerty , John Doe and similar. Matching is exact and whole-field, so a customer called Testa or Contestabile is never affected by the entry test .
You can read the full list on the settings screen before switching the rule on.
🛡️ Check that the email can actually receive mail
Optionally look up the address’s domain during checkout and turn the order away if it cannot receive mail at all. If the lookup itself fails, the order goes through, so a DNS problem never costs you a sale.
🛡️ Block by IP address
Block individual IPv4 addresses, or use wildcards to cover a range:
203.0.113.*
Useful when you identify a recurring source of unwanted checkout attempts. If your store sits behind Cloudflare or another proxy, Checkout Guard reads the forwarded visitor IP rather than the edge server’s.
🛡️ Restrict billing countries
Block checkout for billing countries you don’t serve. This is a blocklist: you name the countries to turn away, not the ones to allow.
