Anti-Fraud para WooCommerce

Anti-Fraud for WooCommerce helps store owners identify suspicious orders, reduce card testing activity, and create fraud prevention workflows that fit their business.

Use configurable rules, risk checks, and automated actions to help protect your store from:

• Card testing attacks
• Stolen credit card attempts
• Checkout bots
• Fake customer accounts
• High-risk orders
• Chargeback risk

Built for WooCommerce, Anti-Fraud for WooCommerce gives merchants more control over how suspicious activity is detected, reviewed, and handled.

Whether you are dealing with fake orders, card testing attempts or suspicious customer behavior, Anti-Fraud for WooCommerce helps you decide when to approve, review, cancel or block an order.

Card Testing Attacks Are One of the Fastest Growing Threats to WooCommerce Stores

Fraudsters use automated bots to test stolen credit card numbers against online stores.

A card testing attack may lead to:

• Payment gateway restrictions
• Higher processing risk
• Chargebacks
• Store downtime
• Loss of customer trust

How OPMC Anti-Fraud Helps

• Detects rapid order attempts
• Flags suspicious activity patterns
• Restricts high-risk customers
• Applies automated rules
• Integrates with reCAPTCHA and MaxMind

Anti-Fraud for WooCommerce helps reduce this risk with velocity checks, order risk rules, IP controls, and automated actions.

Why use Anti-Fraud for WooCommerce?

Fraud Protection Built Specifically for WooCommerce

Unlike generic fraud tools, Anti-Fraud was built specifically for WooCommerce and has been protecting stores since 2014.

Fraud prevention works best when it combines multiple signals. Anti-Fraud for WooCommerce uses a layered approach to help you evaluate order risk and take action before suspicious orders become costly problems.

The extension includes tools for:

• AI-assisted fraud analysis
• Velocity attack protection
• Custom fraud rules
• IP and country restrictions
• Proxy and VPN detection
• MaxMind minFraud integration
• Automated actions and review workflows

Built-in controls for suspicious orders

Different stores have different risk tolerances. Anti-Fraud for WooCommerce lets you configure how strict your fraud prevention rules should be, so you can balance protection with a smooth customer experience.

Available controls include:

• Customer whitelisting
• Bulk whitelisting
• Rule tuning
• Manual review workflows
• Risk thresholds
• Custom order actions

You can configure the extension to help decide when orders should be:

• Approved
• Held for review
• Cancelled
• Blocked

This gives you more control over false positives while still helping protect your store from suspicious activity.

Recent improvements

Anti-Fraud for WooCommerce is actively maintained to support current WooCommerce stores and evolving fraud prevention needs.

Recent enhancements include:

• Improved IP geolocation accuracy
• Enhanced MaxMind integration
• New whitelisting management tools
• Improved performance for larger stores
• Ongoing WooCommerce compatibility updates
• Expanded fraud rule controls
• User interface improvements

Best practices and limitations

No fraud prevention extension can guarantee that every fraudulent order will be detected. Fraud tactics change over time, and some suspicious activity may bypass automated checks.

For best results, we recommend:

• Using multiple fraud indicators
• Enabling MaxMind minFraud, where available
• Reviewing high-risk orders before fulfillment
• Keeping fraud rules up to date
• Combining store-level fraud controls with payment gateway protections

Is Anti-Fraud for WooCommerce right for your store?

Anti-Fraud for WooCommerce helps with

• Detecting suspicious orders
• Reducing card testing activity
• Lowering chargeback risk
• Automating fraud review workflows
• Creating custom rules for your store

Anti-Fraud for WooCommerce does not

• Guarantee that every fraudulent order will be detected
• Replace your payment gateway security tools
• Manage chargeback disputes on your behalf
• Remove the need for secure store management practice

Why Merchants Trust OPMC

OPMC has been developing WooCommerce extensions since 2014 and supports merchants around the world.

Our plugins are used by businesses ranging from small online stores to larger WooCommerce deployments. We actively maintain our products, release updates, and provide support from the team that builds the software.

Analytics dashboard

The Anti-fraud dashboard gives you a central view of recent fraud activity and order risk information.

• See your overall risk mix at a glance — quickly compare how many orders are currently classified as low, medium, or high risk.
• Focus on the orders that need attention — identify medium- and high-risk activity without manually opening every WooCommerce order.
• Monitor recent fraud pressure — review order volume, medium-risk orders, high-risk orders placed on hold, and high-risk orders cancelled during the last 24 hours.
• Understand your revenue exposure — see both recent store revenue and the value associated with high-risk orders, helping you judge the potential financial impact of suspicious activity.
• See whether your protection is taking action — track how many high-risk orders have been held or cancelled rather than relying on guesswork.
• Keep an eye on repeat threats — monitor blocked email activity and, when applicable, PayPal orders that are still awaiting verification.
• Review recent orders in context — see customer, order value, order status, and risk level together so suspicious transactions stand out more quickly.
• Check that fraud screening is keeping up — queue-health information helps surface pending or delayed fraud checks before they become an unnoticed backlog.

Handle suspicious orders automatically

Reviewing every questionable order by hand slows fulfillment, while letting risky orders pass unchecked can lead to chargebacks, payment disputes, and lost inventory. Anti-Fraud for WooCommerce lets you decide what should happen when an order reaches your chosen risk level.

• Place suspicious orders on hold for manual review.
• Automatically cancel orders that reach a higher risk threshold.
• Send administrator alerts when an order reaches your chosen risk score.
• Stop high-risk checkouts before payment is completed.
• Block known risky email addresses and IP addresses to help prevent repeat attempts.

Score orders using signals that matter to your business

Fraud rarely comes down to a single warning sign. Anti-Fraud for WooCommerce combines multiple order and customer signals into a risk score, helping you identify unusual behavior without treating every customer the same way.

Enable the rules that are relevant to your store and assign each rule a weight based on how strongly it should influence the final score.

• First-time buyers: Add risk when a customer or email address has no previous completed orders.
• Unusually large orders: Flag orders that are significantly higher than your typical order value or exceed a maximum amount you define.
• Billing and shipping differences: Add risk when billing and delivery information do not match.
• Phone and billing country mismatches: Detect inconsistencies between a customer’s phone country code and billing country.
• IP and geolocation checks: Compare customer location signals with billing information.
• Proxy or VPN usage: Add risk when checkout traffic appears to come through a proxy or VPN.
• Repeated activity from the same IP: Identify multiple orders using different delivery details from the same IP address.
• International and higher-risk countries: Apply additional risk to international orders or countries you choose to monitor more closely.
• Suspicious email domains: Flag selected domains or optionally add automated email-domain checks.

Stop high-risk checkouts before payment

If fraudulent traffic is reaching your payment gateway, detecting it after payment may be too late. Anti-Fraud for WooCommerce can assess an order before payment is completed and stop checkout when the calculated risk reaches your high-risk threshold.

Enable the pre-payment fraud check to:

• Evaluate order risk before the payment transaction proceeds.
• Block checkout when the order reaches your configured high-risk threshold.
• Display a custom message when a checkout is stopped.
• Reduce the number of clearly high-risk transactions reaching your payment provider.

Understand why an order was flagged

A fraud score is more useful when you can see what caused it. Anti-Fraud for WooCommerce shows risk information directly on the WooCommerce order screen so your team can review suspicious orders with more context.

For a checked order, you can review:

• The overall risk score and risk level.
• The fraud rules that contributed to the score.
• Why individual rules were triggered.
• Relevant order, customer, IP, phone, and location information used by supported checks.
• The relative contribution of matched fraud rules.
• Quick actions for blocking a suspicious email address or IP address.

Scan risk across your order list

You do not have to open every order to find the ones that deserve attention. Risk information in the WooCommerce Orders screen helps your team spot low-, medium-, and high-risk activity while reviewing daily orders.

Keep trusted customers moving

Fraud prevention should not create unnecessary friction for customers and order sources you already trust. Use the allow list to exclude selected trusted identifiers from applicable fraud checks or automated actions.

You can create trusted exceptions using information such as email addresses, IP addresses, phone numbers, user roles, payment methods, names, locations, and selected REST API keys.

Block known fraudulent customers

When the same bad actors keep coming back, you should not have to investigate them from scratch every time. The Anti-Fraud block list helps prevent repeat abuse using customer and checkout information you already know is risky.

Block or monitor identifiers including:

• Email addresses.
• IP addresses.
• Phone numbers.
• Countries and locations.
• Customer names.
• Address keywords.
• Cities, states or regions, and postal codes.

Anti-Fraud can also automatically add email addresses and IP addresses associated with high-risk orders when those options are enabled.

Add MaxMind minFraud for deeper risk intelligence

When you need more information than the order itself can provide, Anti-Fraud for WooCommerce can combine its own configurable rules with MaxMind minFraud transaction intelligence.

Set the MaxMind risk threshold and rule weight so its result becomes another signal within your Anti-Fraud workflow rather than a separate decision system.

Add advanced IP signals with supported MaxMind plans

Stores using a MaxMind plan that includes Insights or Factors can also use additional IP intelligence to identify patterns that may deserve closer review.

• Anonymous VPN detection.
• Public proxy detection.
• Tor exit-node detection.
• Hosting and datacenter IP detection.
• Distance between the customer’s IP location and billing address.

Add identity verification for selected high-risk orders

Some orders need more than a warning, but automatically rejecting every suspicious customer can cost legitimate sales. The optional Trust Swiftly integration gives you another path: ask selected high-risk customers to complete additional identity verification.

Choose the verification workflow, when verification should take place, and the risk score that should trigger it.

• Set a risk threshold for additional verification.
• Select a Trust Swiftly verification template created for your account.
• Choose whether verification runs before or after checkout.
• Reserve additional verification for orders that actually reach your chosen risk level.

Add AI-assisted context to order reviews

When your team is reviewing a questionable order, another perspective can help surface patterns that are easy to overlook. Anti-Fraud for WooCommerce can optionally send limited order context to OpenAI and display an AI-generated risk note in the WooCommerce admin.

Choose a supported model and connect your own OpenAI API credentials. AI-generated information is designed to supplement your configured fraud rules and order review process, not replace them.

Extend protection across checkout and external services

Fraud patterns change, and different stores face different types of abuse. Anti-Fraud for WooCommerce includes optional integrations and additional protection tools so you can add more layers when your store needs them.

• Cloudflare Turnstile: Add low-friction human verification to checkout to help slow bots and automated card testing.
• Google reCAPTCHA v2: Add supported Google CAPTCHA protection to checkout.
• PayPal protection: Limit rapid PayPal payment attempts, strengthen applicable PayPal checkout paths, and optionally verify PayPal account email addresses before fulfillment.
• MaxMind minFraud: Add Score, Insights, Factors, and supported advanced IP signals according to your MaxMind service level.
• Trust Swiftly: Add step-up identity verification for selected high-risk orders.
• OpenAI: Add optional AI-assisted risk notes to help administrators review suspicious orders.
• QuickEmailVerification: Add automated checks for suspicious or disposable email domains.
• BigDataCloud: Add IP-to-region information to support billing and geolocation comparison rules.
• FraudLabs Pro: Add optional SMS verification for supported classic checkout workflows.