內容簡介
Branching Software Order Fraud Protection for WooCommerce 是一款專為 WooCommerce 設計的外掛，旨在阻止信用卡測試、詐騙訂單及重複違規者，確保商店的安全性。它提供多種黑名單選項及自動封鎖功能，讓商家能夠有效管理詐騙風險。
【主要功能】
• 多種黑名單選項：可依據電子郵件、電話號碼等封鎖客戶
• 自動封鎖：設定失敗嘗試次數，自動將客戶加入黑名單
• 測試模式：模擬封鎖規則，無需實際影響客戶
• 管理控制：自訂封鎖訊息及批量黑名單管理
• 日誌監控：詳細記錄所有封鎖的客戶及原因
外掛標籤
開發者團隊
② 後台搜尋「Branching Software Order Fraud Protection for WooCommerce」→ 直接安裝（推薦）
原文外掛簡介
Branching Software Order Fraud Protection for WooCommerce stops card testing, fraud orders, and repeat offenders before they reach your payment gateway. Blacklist customers by email address, email domain, phone number, name, IP address, or billing/shipping address, with wildcard rules, automatic blacklisting after repeated failed attempts, CSV import, complete fraud logs, and a safe Test Mode to preview every rule before it blocks anyone.
No monthly fees. No per-order quotas. No customer data sent to third-party services: all fraud detection runs on your own server.
Why store owners choose this fraud plugin
Transparent blocking: every blocked checkout is logged with the exact reason, so you always know why an order was stopped. No black-box scores, no mystery false positives.
Actually free: name, address, phone, IP, email, and wildcard blacklisting, auto-blocking, CSV import, Test Mode, and full logs are all included. Nothing here is a locked teaser.
Test Mode first: enable any rule in simulation and watch what it would block before it touches a real customer.
Built for modern WooCommerce: HPOS (High-Performance Order Storage) and block-based checkout fully supported.
Key Features
Blacklisting
Block customers at checkout by any combination of:
Email address, email domain, or email wildcard (e.g. block all @frauddomain.com or any email containing spam)
Phone number
Customer name
IP address
Billing or shipping address (full or partial match, with wildcard support)
Admin Controls
Set a custom block message shown to blocked customers at checkout
Configure a fraud attempt threshold to automatically blacklist customers after N failed attempts
“Blacklist Order” and “Remove from Blacklist” order actions directly on the order edit screen
Bulk blacklist customers from the orders list page
CSV bulk import for blacklist entries
Whitelist trusted payment gateways (bypass checks for specific gateways)
Whitelist specific customer emails (always allow through)
Blocking Rules
Block by order status: choose which statuses trigger blacklist checks
Block by product type: configure which product types are included in checks
Test / Simulation Mode
Enable Test Mode to log blocked customers without actually blocking them. Safe for testing on live sites
Dashboard Widget
At-a-glance Fraud Protection Summary widget on the WordPress admin dashboard
Shows blocks this week, fraud attempts this month, and top 5 blocked reasons
Quick links to the blocked logs and fraud attempts log pages
Natively moveable and dismissible via WordPress Screen Options
Logging & Monitoring
Admin fraud logs page showing all blocked customers with reason, date, IP, and address
Database logging of fraud attempts to track repeat offenders
Admin email alert when a blocked order is attempted (configurable address)
Debug log option for troubleshooting
Security
Log files protected with .htaccess (denies direct HTTP access on Apache and Nginx)
SQL injection prevention via prepared statements throughout
CSRF (nonce) protection on all admin form submissions
Capability checks (manage_woocommerce) on all admin actions
No sensitive data exposed via HTTP responses
Pro version (coming soon)
Order Fraud Protection Pro is launching soon with advanced defenses for stores facing card testing and organized fraud:
Country blocking (block list or allow list)
Velocity rules: limit checkout attempts per IP or email
Transparent 0-100 risk scoring, with a color-coded Risk column on your orders list and a “why flagged” panel on every order
Checkout bot protection: an invisible honeypot plus your choice of Cloudflare Turnstile, Google reCAPTCHA v2 or v3, or hCaptcha
Instant block notifications for Slack, Discord, Microsoft Teams, Google Chat, or any JSON webhook (Zapier, Make, n8n)
Daily fraud digest email
Everything runs on your own server, with the same transparent rules and Test Mode as the free plugin. Join the Pro waitlist to get launch pricing when it ships.
Credits
This plugin is based on the original Woo Manage Fraud Orders plugin (GPLv2 or later) originally developed by Prasidhda Malla, sranzan, and BrianHenryIE. The original plugin is no longer maintained and has been closed on WordPress.org. If you previously used it, your existing blacklists and settings carry over automatically when you activate this plugin. This version has been significantly extended and improved by Branching Software.
