by The WP Garden 5 (2 reviews)

Checkout Guard – Block Fake Orders, Spam & Fraud for WooCommerce

Name: Checkout Guard – Block Fake Orders, Spam & Fraud for WooCommerce
Rating: 5.0 (2 reviews)
Author: The WP Garden

Block fake and spam WooCommerce orders at checkout. Stop disposable email, junk names, bad IPs, and countries you don't sell to.

Checkout Guard ranks #17,236 among WordPress.org plugins with 90+ active installations, is #2,785 of 14,124 in the E-commerce category, a 5/5 rating from 2 reviews, and was last updated Oct 28, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Compatible with WP 7.1.4

v2.1.1 Current Version v2.1.1

Updated 1 week ago Last Update on 28 Oct, 2026

Refreshed 1 week ago Last Refreshed on

#2,785 of 14,124 in E-commerce Top 25% by installs Downloads -64.3% this week Actively maintained

View on WordPress.org

Rank

#17,236

— No change

Active Installs

90+

+5.9%

KW Avg Position

0.3 better

Downloads

2.3K

+4 today

Support Resolved

— No change

Rating

100%

Review 5 out of 5

5 (2 reviews)

Next Milestone 100

Total Progress 10%

90+ 100+

4,756

Ranks to Climb

Growth Needed

8,000,000

Active Installs

Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

Exact install estimates within tiers
Track install growth over time
Milestone progress predictions

Upgrade to Pro

Need 9 more installs to reach 100+

Rank Changes

Current #17,236

Change

Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Upgrade to Pro

Active Installs 0,000,000+

Growth +0.0%

Peak 0,000,000

Downloads Growth

Downloads

Growth

Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

5.0

2 reviews

Overall 100%

2 (100%)

0 (0%)

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version: 2.1.1
Last Updated: Oct 28, 2026
Requires WP: 6.5+
Tested Up To: 7.1.4
PHP Version: 7.4 or higher
Author: The WP Garden

Support & Rating

Rating: ★ ★ ★ ★ ★ 5
Reviews: 2
Support Threads: 0
Resolved: 0%

Keywords

anti-spam checkout disposable email fake orders fraud prevention

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Similar Plugins

Adminify – White Label, Admin Menu Editor, Login Customizer

6K+ installs

#2,757

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy)

Google for WooCommerce

800K+ installs

#74

WooPayments: Integrated WooCommerce Payments

800K+ installs

#76

WooCommerce PayPal Payments

800K+ installs

#82

WooCommerce Stripe Payment Gateway

700K+ installs

#85

WooCommerce Tax (formerly WooCommerce Shipping & Tax)

500K+ installs

#115

View all Ecommerce plugins

Frequently Asked Questions

Common questions about Checkout Guard – Block Fake Orders, Spam & Fraud for WooCommerce

Set Protection Mode to Learning first. Every rule runs and records what it would have caught, but nothing is blocked and no customer is turned away. When the results look right, switch to Enforce.

Around 22,000, bundled with the plugin and based on the public disposable email domains list. The settings screen links to the source so you can check any domain. It is a copy taken when the plugin was released, so it will not match the source exactly.

No. Firefox Relay, Apple Hide My Email and Addy deliver to a real permanent inbox, so blocking them would reject a paying customer. They are excluded from the bundled list.

No. Matching is exact and whole-field, never a substring, so test blocks a customer who types "Test" as their whole name but never affects Testa, Contestabile or Testani. The full list is shown on the settings screen so you can check it before switching the rule on.

Enter *@bad-domain.com on its own line in the email blocklist. That blocks every billing email at that domain, and nothing else. You can also enter the bare domain, bad-domain.com. The difference is precision: a bare domain matches anywhere in the address, so it will also catch someone@notbad-domain.com. The *@ form matches the domain exactly. Prefer the wildcard unless you specifically want the looser match.

Enter two lines: *@bad-domain.com for the domain itself and *@*.bad-domain.com for every subdomain under it, such as mail.bad-domain.com or x.y.bad-domain.com. Neither line touches notbad-domain.com.

The * wildcard stands for any run of characters, and the pattern must match the whole address: *@bad-domain.com blocks every address at that domain. spam*@bad-domain.com blocks spammer@bad-domain.com but leaves nice@bad-domain.com alone. *@*.bad-domain.com blocks every subdomain, such as mail.bad-domain.com, but not bad-domain.com itself. *.edu blocks every address ending in that TLD. Catch-all entries such as * or *@* would block every order on your store, so they are rejected and removed when you save.

Yes. 203.0.113.* covers that whole IPv4 range. Each * stands for one whole number, so 192.168.*.1 covers 192.168.7.1 but not 192.168.7.2, and the first number must be written out. For IPv6, or for ranges that do not end on a dot, use CIDR notation: 203.0.113.0/24, 198.51.100.128/25, 2001:db8::/32. IPv6 addresses match however they are written, so 2001:db8::1 also blocks 2001:0db8:0:0:0:0:0:1.

Yes. Checkout Guard reads forwarded proxy headers by default, so IP rules match the real visitor rather than the CDN edge. If your store is not behind a proxy you can switch that off in Store setup.

Not currently. The country rule is a blocklist: you list the countries to turn away.