Block unwanted or spam users from your store with the Blacklist for WooCommerce plugin. Create rules and restrict based on conditions such as name, IP address, phone number, and more.
Installation
↑ Back to top- Download the .zip file from your WooCommerce account.
- Go to: WordPress Admin > Plugins > Add New and upload the file you have downloaded.
- Install Now and Activate Plugin.
More information at Install and Activate Plugins/Extensions.
Configuration
↑ Back to topAfter activating the plugin, go to WooCommerce > Settings > Blacklist Manager and configure the following:
General Settings
↑ Back to topConfigure the general settings for the blacklist and block plugin. Go to WooCommerce > Settings > Blacklist Manager > General Settings and set up the following settings:
- Enable Admin Email Notification: Check to send an email to the admin when a block/prevent/cancel action is triggered.
- Whitelist Overrides All Rules: Enable the whitelist to exempt specific customers from every rule action. When off, the whitelist only exempts customers from “Prevent Order”. Cancel Order and Block Registration rules still apply.
- Enable Regex Matching: Check the box to enable “Regex” as a match type on advanced rule conditions.
- Bulk Action Identifiers: Choose the bulk action identifiers that the order list blocks. These identifiers include:
- Email address
- Phone number
- IP address
- Full name
- Billing address
- Billing postcode
- Billing country
- Orders List Risk Column: Enable to show a blacklist badge on the orders list.
- Email Subject: Add the subject line for the notification email.
- Email Body: Write a custom email body. Use supported placeholders to automatically populate the email with relevant event details, including {{email}}, {{name}}, {{ip}}, {{action}}, {{rule}}, {{order_number}}, {{source}}, {{reason}}, {{details_table}}.
Quick Blacklist
↑ Back to topEasily add values to the blacklist separated by commas. Go to WooCommerce > Settings > Blacklist Manager > Quick Blacklist and configure the following:
Add your values separated by commas or one per line, and choose a default action. It uses OR logic, meaning if any single condition matches, the selected action is applied immediately.
- Default Action: Choose what action happens when a match is found. You can choose between the following actions:
- Prevent Order
- Cancel Order
- Block Registration
- Emails: Add email addresses to block.
- First Names: Add first names that you want to block. Accepts multiple values per line or comma-separated.
- Last Names: Add last names, or enter a full first and last name together for more precise matching.
- Phone Numbers: Add phone numbers to block.
- IP Addresses: Add IP addresses to block.
- Billing Countries: Add billing countries to restrict.
- Shipping Countries: Add shipping countries to restrict.
- Customer Error Message: Set a custom message that blocked customers will see, such as “You can not place an order with this email.”
Advanced Blacklist
↑ Back to topCreate advanced rules to block or restrict customers from certain actions. Each rule opens in dedicated meta boxes. Advanced rules are evaluated first and override quick blacklist matches. Go to WooCommerce > Settings > Blacklist Manager > Advanced Blacklist and click on “Add New Blacklist Rule” to create new rules:
Rule Name: Add a name for the specific rule.
Rule Action and Status
↑ Back to top- Status: Enable or disable the rule.
- Action: Choose the action to apply for restricted users.
- Prevent Order
- Cancel Order
- Block Registration
- Priority: Set a priority for the rule.
- Ban Expiry: Choose the period for which the ban will last. You can permanently ban or ban for a specific period of time:
- Permanent
- 7 Days
- 30 Days
- 90 Days
- 1 Year
- Custom Date
- Custom Error Message: Add the custom message that will be shown when a customer is blocked from checkout or registration.
Identity Conditions
↑ Back to topSet the identifying conditions for restricting customers.
- First Name: Add a first name to match against the rule. You can apply conditions for the first name including:
- Exact
- Contains
- Start with
- Ends with
- Wildcard
- Last Name: Add the last name that you want to block.
- Email: Enter the email address that the rule will block.
- Phone: Add the phone number that the rule will block.
- IP Address: Enter an IP address to add to the blacklist.
Address Conditions
↑ Back to topConfigure address conditions to block customers. You can configure the following address conditions for both Billing Address and Shipping Address.
- Address Line 1: Enter the address line 1 that you want to restrict.
- Address Line 2: Add address line 2 to block.
- City: Add the city that you want to block by this rule.
- State/County: Select the state or county that you want to block.
- Postcode/ZIP: Add the postcode or ZIP code that you want to restrict.
For each of the above settings, you can choose to apply the rule based on different conditions:
- Exact
- Contains
- Start with
- Ends with
- Wildcard
Order and Country Conditions
↑ Back to top- Order Total Min: Set a minimum order total for blocking the customer.
- Order Total Max: Set a maximum order total to block the user.
- Billing Country: Choose the billing countries for which the rule will block the customer.
- Shipping Country: Choose the shipping countries that you want to block.
- IP Country: Select the countries that you want to restrict based on IP addresses.
- IP Country Mismatch: Check the box to restrict a user if the IP address (detected country) does not match the billing country.
Automatic Blacklisting
↑ Back to topAutomatically blacklist customers based on different triggers. Go to WooCommerce > Settings > Blacklist Manager > Automatic Blacklisting and configure the following settings:
Each trigger counts repeat offences within its own time window and writes a rule when the threshold is reached. Whitelisted customers are never blacklisted automatically.
- Failed Orders From the Same Customer: Automatically blacklist a customer after multiple failed orders.
- Cancelled Orders From the Same Customer: Block when the same customer has multiple cancelled orders.
- Refunded Orders From the Same Customer: Automatically block when a customer has refunded orders.
- Blocked Attempts From the Same IP: Auto-block customers when they make too many attempts from the same IP.
For each trigger, you can configure the following options:
- Threshold and Window: Set the number of occurrences and the number of days to trigger a blacklist.
- Identifiers to Block: Choose the identifiers for blocking a customer. You can choose between:
- Email address
- Phone number
- IP address
- Action: Choose the specific action for blacklisting:
- Prevent Order
- Cancel Order
- Block Registration
- Ban Duration: Set the duration for the block:
- Permanent
- 7 Days
- 30 Days
- 90 Days
- 1 Year
Coverage
↑ Back to topControl where blacklist rules are enforced. Go to WooCommerce > Settings > Blacklist Manager > Coverage and configure the following settings:
Every entry point uses the same rules, the same quick blacklist, and the same whitelist. Switching an entry point off unhooks it entirely, so it costs nothing while it is off. WordPress registration, login, comments, and the REST API start switched off, so turning one on is always a deliberate choice that widens every rule you already have beyond checkout.
- Classic Checkout: Validates the shortcode checkout and enforces cancel rules on the order it creates.
- Blocks Checkout: Validates the block checkout through the Store API before payment is taken.
- WooCommerce Registration: Covers My Account sign-up and the “create an account” option at checkout.
- WordPress Registration: Covers sign-up through wp-login.php, for stores that leave it open.
- Login: Refuses sign-in for an account a rule matches. Users who can manage WooCommerce are never locked out.
- Comments and Product Reviews: Refuses a comment or review from a blacklisted name, email, or IP address. Users who can moderate comments are never blocked.
- REST API Order Creation: Applies to orders created through the WooCommerce REST API. Orders placed from wp-admin are never evaluated.
Whitelist
↑ Back to topExempt trusted customers from blacklist rules. Go to WooCommerce > Settings > Blacklist Manager > Whitelist and configure the following settings:
Whitelisted customers are exempt from blacklist rules. Add a row, choose what to match on, then save. Empty rows are deleted when you save. Leave Expires empty for a permanent exemption.
- Type: Choose what the whitelist entry matches on. You can choose between:
- Email address
- Email domain
- Phone number
- IP address
- IP range/CIDR
- User role
- Payment method
- User ID
- Value: Enter the value to match, based on the type selected.
- Note: Add an optional note to identify the entry.
- Status: Set the entry as Active or Inactive.
- Expires: Set an expiry date for the exemption, or leave empty to keep it permanent.
- Created: Shows the date the entry was added.
- Actions: Remove a whitelist entry.
Activity Logs
↑ Back to topReview a record of every blocked action. Go to WooCommerce > Settings > Blacklist Manager > Activity Logs and view the following:
Performance Cards: An overview of blocked activities, showing:
- Total Blocked Actions: The total number of actions blocked across all rules.
- Active Rules: The number of currently active blacklist rules.
- Blocked Emails: The number of emails blocked.
- Blocked IPs: The number of IP addresses blocked.
Below the performance cards, the activity log table lists every matched action with the following columns:
- Date/Time: When the action was blocked.
- User Name: The name associated with the blocked action.
- Email: The email address associated with the blocked action.
- Action Type: The type of action that was blocked, such as Prevent Order, Cancel Order, or Block Registration.
- Matched Rule Source: The rule or source that triggered the block.
- IP Address: The IP address associated with the blocked action.
Use Bulk Actions, the search field, or the All Types filter to narrow down logged entries.
Frequently Asked Questions
↑ Back to topWhat does the Blacklist for WooCommerce plugin do?
↑ Back to topIt blocks or restricts unwanted and spam customers from your store based on conditions you define, such as name, email, phone number, IP address, billing details, or order value.
What actions can a blacklist rule trigger?
↑ Back to topThree actions are available across the plugin: Prevent Order (stops the order at checkout), Cancel Order (cancels an order after it’s placed), and Block Registration (stops the customer from creating an account).
What’s the difference between Quick Blacklist and Advanced Blacklist?
↑ Back to topQuick Blacklist lets you add simple values (emails, names, phone numbers, IPs, countries) separated by commas, with one default action applied using OR logic, meaning any single match triggers it. Advanced Blacklist lets you build detailed rules with multiple conditions, match types (exact, contains, starts with, ends with, wildcard), priorities, and expiry periods. Advanced rules are evaluated first and override quick blacklist matches.
Can I block customers automatically, without creating rules myself?
↑ Back to topYes. Automatic Blacklisting lets you set thresholds for failed orders, cancelled orders, refunded orders, or blocked attempts from the same IP within a time window. Once a customer crosses the threshold, a rule is written automatically.
Are whitelisted customers ever blacklisted automatically?
↑ Back to topNo. Whitelisted customers are excluded from automatic blacklisting as well as manual rules, so long as Whitelist Overrides All Rules is enabled in General Settings.
Where are blacklist rules enforced by default?
↑ Back to topClassic checkout, block checkout, WooCommerce registration, and REST API order creation are covered from the start. WordPress registration, login, comments, and product reviews start switched off, since these extend blacklist enforcement beyond checkout and are treated as an opt-in decision.
