eCommerce
WooCommerce Anti-Fraud
WooCommerce Anti-Fraud evaluates orders with configurable fraud rules, assigns risk scores, and lets store teams hold, cancel, review, or block suspicious activity. It also addresses card testing through checkout CAPTCHA and attempt limits, while optional services such as MaxMind minFraud and TrustSwiftly can add further checks.
PluginNest file-validatedZIP downloadUpdated Aug 16, 2026
Overview
WooCommerce Anti-Fraud is suited to stores that need more structured fraud review than a payment gateway alone provides. The extension combines configurable signals—including customer history, order value, address consistency, IP and location data, proxy use, email characteristics, and repeated attempts—into a score from 0 to 100. That gives an operations team a consistent starting point for deciding which orders need attention, rather than requiring every order to be assessed in the same way. The practical value depends on configuration. Store owners can begin by holding medium- or high-risk orders for manual review, inspect the matched rules on the WooCommerce order screen, and only then consider automatic cancellation or pre-payment blocking. Checkout CAPTCHA, failed-payment limits, and order-attempt limits are particularly relevant when a store is seeing card testing or automated checkout abuse. Cloudflare Turnstile and Google reCAPTCHA v2 are supported; Google reCAPTCHA v3 is not currently supported. Optional external services may require separate accounts, API keys, or paid plans. Before enabling aggressive automation, test normal customer journeys, guest checkout, payment methods, and both classic and block checkout where applicable on staging.
Configurable fraud rules combine order, customer, address, IP, location, proxy, email, and repeated-attempt signals into a risk score from 0 to 100.
Automatic actions can place orders on hold, cancel orders above a chosen threshold, leave orders unchanged for manual review, or stop high-risk checkout before payment.
Checkout protection supports Cloudflare Turnstile and Google reCAPTCHA v2, with configurable site and secret keys.
Card-testing controls include order-attempt limits, advanced attempt counting, failed-payment limits per order, and time-based limits.
Allow lists and block lists can use identifiers such as email addresses, IP addresses, phone numbers, countries, names, and location details.
Optional integrations and tools include MaxMind minFraud, PayPal-specific controls, TrustSwiftly, and AI-assisted fraud signals where configured.
Compatibility and setup context
- Configured from WooCommerce > Settings > Anti-Fraud, with a dedicated dashboard available when enabled.
- Supports classic checkout CAPTCHA placement and provides a Blocks integration for WooCommerce Block Checkout.
- The exact settings shown can vary with the store’s payment methods, enabled integrations, and configuration.
- External services such as MaxMind or email verification may require separate accounts, API keys, or paid plans.
- Test checkout flows on staging after enabling CAPTCHA or pre-payment checks, especially where the theme or another extension already adds bot protection.
Editorial research
Sources used for this product note
These links support the feature claims on this page. They do not mean PluginNest is affiliated with, endorsed by, or supported by the product developer.
- The extension evaluates orders with configurable fraud rules, assigns a 0–100 risk score, and supports review, hold, cancellation, and pre-payment actions.
- The product supports layered fraud controls including card-testing protection, custom rules, IP and country restrictions, proxy detection, MaxMind minFraud, and automated workflows.
- Checkout CAPTCHA supports Cloudflare Turnstile and Google reCAPTCHA v2, while Google reCAPTCHA v3 is not supported.
- Order-attempt limits, failed-payment limits, and time-based limits are documented controls for repeated checkout activity.
- Allow lists and block lists can use customer and checkout identifiers including email, IP address, phone number, country, name, and location information.
- MaxMind minFraud and TrustSwiftly are documented optional integrations, and external services may require separate account credentials or keys.
- The documentation describes the settings path, dashboard, classic checkout CAPTCHA behavior, and WooCommerce Blocks integration.
- The product documentation states that fraud prevention cannot identify every fraudulent transaction and recommends using payment-gateway controls and manual review.
Trust workflow
File integrity checked
The archive passed PluginNest ZIP validation, path safety checks and SHA-256 fingerprinting before publishing.
Why cheaper?
GPL distribution, no official vendor support
GPL products can be redistributed legally. PluginNest sells affordable access to the GPL files and update workflow, but official license keys, SaaS accounts and vendor support are not included.
Product preview
A closer look at WooCommerce Anti-Fraud
Version 8.0.3
Product Details
Version
8.0.3
Last Updated
Aug 16, 2026
File Size
1.8 MB
License
GPL
PluginNest is not affiliated with the original product developer. Product names and marks belong to their owners. Products are listed as GPL-distributed software with no official license keys or official vendor support included. Security claims are shown only after a real PluginNest file review is recorded.