Stop card testing before it reaches your payment gateway.
Checkout Protection scores every WooCommerce checkout in real time and blocks bots, fake orders and fraud attempts before a payment is ever attempted — so you stop paying for attacks you never asked for.
- Free version on WordPress.org
- 7-day Pro trial, no card required
- Your data never leaves your site
203.0.113.427 attempts in 60s94BLOCKED198.51.100.7Disposable email domain62FLAGGED192.0.2.18Blacklisted IP100BLOCKED203.0.113.9Normal checkout6ALLOWED198.51.100.23Blocked billing country80BLOCKEDCard testers love an unprotected checkout. You pay the bill.
Fraudsters use bots to run stolen cards through small online stores to see which ones work. Your store looks fine from the outside — while hundreds of junk attempts hit your gateway behind the scenes. Without checkout protection, every one of those attempts can cost you.
Gateway fees pile up
Depending on your gateway, you can be charged per authorization attempt — including the declined ones fired off by bots.
Your merchant account is at risk
A sudden spike in declines and disputes can trigger reviews, holds or even suspension by your payment processor.
Chargebacks & disputes
Cards that “pass” the test get used for real fraud — and the disputes land on you, plus the fees.
Junk orders everywhere
Fake and failed orders clutter WooCommerce, mess up your reports and waste your team's time.
One risk score. Every checkout. Before payment.
Checkout Protection sits between your checkout form and your payment gateway. Bad traffic is stopped there — real customers don’t notice a thing. That’s checkout protection that works before payment, not after the damage.
A customer hits “Place order”
Classic shortcode checkout or the Cart & Checkout blocks — the attempt is captured before anything reaches your gateway.
Your modules analyse it
Every protection module you've enabled checks the attempt in real time.
The risk score decides
Results combine into one score. Cross your threshold and checkout is blocked — and every decision is logged.
Serious checkout protection, free forever.
The free version of Checkout Protection on WordPress.org isn’t a demo. Every module below works out of the box and feeds the same risk score.
Rate Limiting
Throttles repeated checkout attempts from the same visitor in a rolling time window, so a script hammering your checkout gets cut off automatically.
Risk Analyzer
Combines every enabled module into one risk score and blocks checkout once your threshold is reached — layered checkout protection instead of a single rule.
Blacklist
Instantly block checkout attempts from IP addresses or email addresses you've already identified as abusive.
Whitelist
Let trusted repeat customers, staff or test orders skip every check — so your own protection never gets in your way.
Disposable Email Blocker
Flag or block checkouts made with throwaway email domains — a common signal of bot and fraud traffic.
Country Blocker
Add risk to, or block, checkouts from billing countries you choose — ideal if you only ship to certain regions.
Monitor Mode
Log everything, block nothing. See exactly what your settings would stop before you turn on full checkout protection.
Security Log & Dashboard
Every checkout protection decision is stored in your own database, with blocked-checkout counts for the last 7 days and all time.
Rules stop the obvious. Pro catches the patterns.
Card testers adapt. They rotate emails, retry after declines and strike at 3 a.m. Checkout Protection Pro adds pattern-based detection and alerts that catch what single rules miss.
Failed Payment Auto-Block
Tracks repeated failed payments per IP and per email. Once your threshold is crossed in a rolling window, later attempts get high risk automatically — the classic card-testing signature, shut down.
Checkout Velocity Protection
Flags a single IP cycling through many different billing emails in a short window — the exact pattern bots use to test card after card.
Instant Email Alerts
Get an email the moment a checkout is blocked, throttled so a sustained attack won't flood your inbox. Know about an attack while it's happening.
- Priority email support
- All free features included
- On the roadmap: CAPTCHA (Turnstile / hCaptcha) & VPN / proxy detection
Pro checkout protection for less than $4 a month.
Start with free checkout protection. Upgrade when you want pattern detection and real-time alerts. Every plan includes all Pro features.
Single Site
- Everything in Free
- Failed Payment Auto-Block
- Checkout Velocity Protection
- Instant email alerts
- Priority email support
- 1 website
3 Sites
- Everything in Free
- Failed Payment Auto-Block
- Checkout Velocity Protection
- Instant email alerts
- Priority email support
- Up to 3 websites
Unlimited Sites
- Everything in Free
- Failed Payment Auto-Block
- Checkout Velocity Protection
- Instant email alerts
- Priority email support
- Unlimited websites
Free
Rate limiting, risk score, blacklist & whitelist, email & country blockers, Monitor Mode and the security log — $0, forever.
🎁 Try Pro free for 7 days — no card required. Install the free version, then click Start Trial in the plugin menu.
🔒 Secure checkout by Freemius · Cards & PayPal accepted
Compare at a glance.
| Feature | Free | Pro |
|---|---|---|
| Rate limiting | ✓ | ✓ |
| Risk Analyzer (single risk score) | ✓ | ✓ |
| IP & email blacklist | ✓ | ✓ |
| Whitelist for trusted customers | ✓ | ✓ |
| Disposable email blocker | ✓ | ✓ |
| Country blocker | ✓ | ✓ |
| Monitor Mode | ✓ | ✓ |
| Local security log & dashboard | ✓ | ✓ |
| Classic & Block checkout, HPOS | ✓ | ✓ |
| Failed Payment Auto-Block | — | ✓ |
| Checkout Velocity Protection | — | ✓ |
| Instant email alerts on block | — | ✓ |
| Priority email support | — | ✓ |
| Download free | Get Pro |
Your checkout, before and after.
Without checkout protection
- Bots can retry your checkout as fast as they like
- Every junk attempt reaches your payment gateway
- Disposable-email and throwaway orders slip through
- No way to block a known bad IP or email
- You find out from your gateway — after the damage
With Checkout Protection
- Repeat attempts are throttled automatically
- High-risk checkouts are blocked before payment
- Disposable email domains are flagged or blocked
- Blacklist IPs, emails and countries in a few clicks
- A full local log of every decision, ready to review
Everything you're wondering about
Is the free version really free?
Yes. The free version is on WordPress.org and includes rate limiting, the Risk Analyzer, blacklist and whitelist, the disposable email and country blockers, Monitor Mode and the security log — with no time limit.
What do I get with Pro?
Pro adds Failed Payment Auto-Block, Checkout Velocity Protection and instant email alerts when a checkout is blocked, plus priority email support. CAPTCHA for high-risk sessions and VPN/proxy detection are on the roadmap.
How does the free trial work?
Install the free version, then click Start Trial in the Checkout Protection menu. You get every Pro feature for 7 days — no credit card required.
Will it block my real customers?
You're in control. Turn on Monitor Mode first to see what would be blocked without blocking anything. Add trusted customers, staff and test orders to the whitelist so they skip every check, and only enforce once you're happy with your threshold.
Does it send my store's data anywhere?
No. Every check, score and log entry is computed and stored in your own WordPress database. There are no third-party fraud APIs — which also keeps your GDPR/privacy documentation simple.
Does it work with the WooCommerce Checkout block?
Yes. It protects both the classic shortcode checkout and the Cart & Checkout blocks (Store API), and it's compatible with High-Performance Order Storage (HPOS). Because it runs before payment is attempted, a blocked attempt never reaches your payment gateway.
Which plan do I need?
Pick by number of websites: Single Site, 3 Sites or Unlimited Sites. Every plan includes all Pro features, billed monthly, annually (save up to 25%) or once for lifetime access.
What are the requirements?
WordPress 6.3+, PHP 7.4+ and WooCommerce 8.0+ installed and active.
Close the door on card testers today.
Card testers look for checkouts with nothing in the way. Start with the free version in minutes — and switch on Pro when you want pattern detection and instant alerts. Looking for more ways to run your store? Browse our other WooCommerce plugins.
- Free forever plan
- 7-day Pro trial, no card
- No data leaves your site