WooCommerce Anti Fraud
Catches fraudulent WooCommerce orders before you ship them: a 0-100 risk score on every order, WebRTC proxy leak checks, copy and paste detection, device fingerprints and IP intelligence.
Screenshots
Every order gets a fraud score, with each warning sign and the points it took off.
WooCommerce Anti Fraud gives every order a fraud score from 0 to 100 and shows you exactly why. Open an order and the Fraud Risk box lists each warning sign, how many points it took off and the evidence behind it, from the IP's network and location to how the checkout form was filled in. A Fraud column on the orders list shows every score at a glance.
It's built to see through the tricks fraudsters rely on. A WebRTC check finds the real connection behind many VPNs and proxies, copy and paste detection spots details pasted from a list of stolen cards, a timezone check catches browsers whose clocks don't match their IP, and a device fingerprint recognizes the same person across orders even when they change their name, email and IP. Card testers who run stolen cards through your checkout are linked by device and real IP, and you can stop them before the card ever reaches your payment gateway.
Out of the box it only scores and explains. When you're ready, you can put high-risk paid orders on hold, block repeated failed payments and get email alerts. It works with the classic and block checkouts and both of WooCommerce's order storage modes, needs no API key, and adds nothing to your pages except a small script on the checkout. Settings live under Content Powered > WooCommerce Anti Fraud, and updates arrive through the normal WordPress Updates screen.
Features
- A score on every order. 0 to 100, with each warning sign, its points and the evidence right on the order screen.
- Sees through VPNs and proxies. A WebRTC check finds the real connection behind many of them, with its location and network.
- Copy and paste detection. Spots names, addresses and emails pasted from a list, without recording what was typed.
- Device fingerprinting. Recognizes the same device across orders, even with a new name, email or IP.
- IP intelligence. Location, network and connection type for every order: home, mobile, data center, VPN, Tor or iCloud Private Relay.
- Card testing protection. Failed payments are linked by device and real IP, and repeat offenders can be stopped at checkout.
- Hold risky orders. Paid high-risk orders go to On hold instead of Processing, so nothing ships until you've looked.
- Email alerts. Hear about high-risk orders and bursts of failed payments as they happen.
- Can't be fooled by fake headers. Visitor IPs come only from Cloudflare or proxies you trust, so a forged header changes nothing.
- Private by design. No card data, no field values, automatic clean-up, and WordPress's privacy export and erase tools.
- Click Download above to save
woocommerce-anti-fraud.zip. Leave it zipped. - In your WordPress dashboard, go to Plugins > Add New Plugin and click Upload Plugin.
- Choose the ZIP and click Install Now, then Activate Plugin.
To update later, upload a newer ZIP the same way. WordPress offers to replace the installed version and keeps your settings.
Will It Block Real Customers?
Not unless you ask it to. Out of the box it only scores orders and explains the score. Holding high-risk orders and stopping repeated failed payments are switches on the Actions tab, and even then it never blocks on addresses shared by many people, like mobile carriers and iCloud Private Relay. If a genuine customer gets caught, clear them on the Overview tab in one click.
Do I Need an API Key?
No. IP lookups use ipinfo.io, which answers a modest number of lookups without a key. A free ipinfo.io token raises the limit to 50,000 a month; add it on the IP & Location tab.
How Does the WebRTC Check Work?
When a customer reaches checkout, their browser asks a STUN server for its own public IP address. Many VPNs and proxies only cover normal web traffic, so that request goes out over the customer's real connection. If the address differs from the one the order came from, the plugin shows it as the likely real connection, with its location and network, and links the order to others from the same real connection.
Can It See Card Numbers?
No. Card fields sit inside your payment gateway's own secure frame, so the plugin never sees them. It doesn't record what customers type in any field either, only whether each one was typed, pasted or autofilled.
Does It Work With the Block Checkout?
Yes. It works with the classic checkout, the block checkout and pay-for-order pages, and with both of WooCommerce's order storage modes.
How Do I Get Updates?
Through the normal WordPress Updates screen. The plugin checks our GitHub releases twice a day, and you can update with one click or turn on auto-updates from the Plugins screen.
- See https://github.com/jmsprsns/woocommerce-anti-fraud/releases for the full release history.
Download
More Free WordPress Plugins
Fast Social Share Buttons
Lightweight social share buttons that load only where they're used: inline, floating sidebar and mobile bar, with near-zero PageSpeed impact.
Redirect Chain Fixer
Finds links in your posts and pages that pass through redirects and points them straight at the final page. Internal links are fixed automatically; external ones wait for your approval.Let's Grow Your Business
Want some free consulting? Let's hop on a call and talk about what we can do to help.
