Blacklist & Checkout Verification Manager for WooCommerce

核心功能

Multi-dimensional blacklist: ban by IP address, email, phone number and shipping address with exact and pattern matching, enforced via woocommerce_after_checkout_validation

Device fingerprint captured at checkout and stored in order meta, matched across future orders even when the customer changes email, phone or address

Email and phone OTP verification gated at checkout before an order is created, with configurable retry limits and expiry stored in custom tables

Disposable / temporary email detection against a maintained domain list, blocking throwaway addresses at registration and checkout

VPN, proxy and datacenter-IP detection to flag or block orders originating from anonymizing networks

Auto-ban rules for repeat RTO (return-to-origin) and chargeback offenders, triggered on order-status transitions you define

Risk-scoring engine combining IP, email, phone, device and velocity signals to allow, challenge (OTP) or block each order

Dedicated wp-admin settings screen to manage blacklist entries, view match logs, and tune thresholds without touching code

HPOS (High-Performance Order Storage / custom order tables) compatible meta and queries, plus legacy post-meta fallback

WooCommerce REST API endpoints to add or remove blacklist entries programmatically from your CRM or fulfilment system

Velocity rules to throttle repeated orders from the same IP, device or card BIN within a time window

Manual review queue with one-click ban / allow actions and an audit trail of who blocked what and when

WPML and WooCommerce Multilingual aware so OTP messages and block notices render in the customer's language

WP-Cron job to expire stale verification tokens and prune old logs on a schedule you control

Configurable customer-facing messages and email/SMS templates for OTP, block notices and verification reminders

按需定制，全程代劳

无需自行搭建——由 ECOSIRE 构建、安装并提供支持的可用应用。

您下单

以一次性构建价格开始。我们在启动时与您共同确定范围。

我们构建与安装

ECOSIRE 在您的 WooCommerce 上构建、配置并安装。

上线 + 支持

约 2–4 周内上线，并提供上线后的支持期。

关于此产品

Cash-on-delivery and high-risk stores lose real money to fake orders, serial RTO (return-to-origin) offenders, chargeback abusers and spam registrations. WooCommerce core has no fraud blacklist and no checkout verification — the closest native tools are manual order status changes and basic comment moderation. This plugin closes that gap.

The Blacklist & Checkout Verification Manager is a custom WooCommerce plugin that ECOSIRE builds, installs and configures on your WordPress site — it is not an instant marketplace download. It hooks into the WooCommerce checkout pipeline (woocommerce_after_checkout_validation, woocommerce_checkout_process, and registration hooks) to evaluate every order and signup against a multi-dimensional blacklist: IP address, email, phone number and shipping address, plus a device fingerprint persisted in order meta and matched across future orders even when the customer changes their details.

For risky orders, the plugin can require email and phone OTP verification before the order is placed, gate disposable-email and VPN/proxy detection, and auto-ban repeat RTO or chargeback offenders based on rules you define. All blacklist entries, match logs and verification events are stored in custom tables / order meta and surfaced in a dedicated wp-admin settings screen, fully compatible with HPOS (High-Performance Order Storage).

Because we build it to your store's reality — your gateway, your COD workflow, your country's phone formats, your WPML or multisite setup — the rules fit how you actually lose money, not a generic template. One-time build fee, then it's yours, running on your own infrastructure with no per-order SaaS charge.

你得到什么

A custom WooCommerce plugin packaged as a standard installable ZIP, built for your WordPress and WooCommerce versions

Installation and configuration on your live (or staging) WordPress site by ECOSIRE, including HPOS compatibility checks

Integration with your active payment gateway, COD workflow and SMS/email provider for OTP delivery

Initial blacklist and risk-rule setup tuned to your store's fraud and RTO patterns

Admin walkthrough plus a short written guide covering the wp-admin settings, blacklist management and review queue

30 days of post-launch support for bug fixes and configuration adjustments after go-live

这是给谁的

COD-Heavy Store Owner

Runs a cash-on-delivery store in a high-RTO market and bleeds money on fake orders and serial non-payers. Needs phone OTP verification and auto-bans for repeat RTO offenders before couriers are dispatched.

Fraud / Risk Manager

Owns chargeback ratios and fulfilment losses at a mid-size WooCommerce operation. Wants device fingerprinting, velocity rules and a review queue to stop abusers who keep changing their email and address.

WordPress Agency / Developer

Builds and maintains WooCommerce stores for clients and needs a self-hosted, HPOS-compatible anti-fraud layer they can configure per client without stitching together five plugins or paying per-order SaaS fees.

Blacklist & Checkout Verification Manager for WooCommerce 如何比较

标准	伊科西尔	定制建造	竞争对手
Blacklist by IP, email, phone and address	包含	包含	部分支持
Device fingerprint matched across orders	包含	部分支持	部分支持
Email + phone OTP verification at checkout	包含	部分支持	部分支持
Auto-ban repeat RTO / chargeback offenders	包含	部分支持	不包括在内
Disposable-email & VPN/proxy detection	包含	部分支持	部分支持
HPOS / custom order tables compatible	包含	部分支持	部分支持
Built, installed and tuned to your store	包含	包含	不包括在内
Instant self-serve download	不包括在内	不包括在内	包含
One-time cost, no per-order SaaS fee	包含	包含	部分支持

关于Blacklist & Checkout Verification Manager for WooCommerce的常见问题

How long does it take to build and install?

Typical delivery is 1 to 2 weeks from confirmation, depending on how custom your rules, gateway and OTP provider integrations are. We build the plugin against your WordPress and WooCommerce versions, install it on a staging or live site, configure your blacklist and risk rules, and confirm it works through real test orders before go-live. You'll get a clear timeline before we start.

What ongoing support and updates are included?

The build includes 30 days of post-launch support for bug fixes and configuration tweaks. After that, you own the plugin outright and can run it indefinitely with no per-order or subscription fee. We offer an optional ongoing maintenance arrangement for WooCommerce/WordPress version-compatibility updates, new rules and feature additions — quoted separately based on scope.

Does this work with HPOS and my existing checkout plugins?

Yes. The plugin is built for WooCommerce HPOS (High-Performance Order Storage / custom order tables) and falls back gracefully to legacy post-meta where needed. Because it hooks into standard checkout actions and filters rather than overriding the checkout template, it coexists with most checkout, gateway and shipping plugins. If you use a heavily customized or block-based checkout, we verify compatibility during the build and adjust the hook strategy accordingly.

How does phone OTP verification work, and do I need an SMS provider?

At checkout, risky or all orders (your choice) can be required to verify a one-time code sent to the customer's phone and/or email before the order is created. For SMS you bring an SMS gateway account (Twilio, your local aggregator, etc.) and we wire it in; email OTP uses your existing WordPress mailer. Codes, retry limits and expiry are stored in custom tables and cleaned up by a scheduled WP-Cron job.

Will it block legitimate customers or hurt conversion?

It's built to be precise, not blunt. You decide whether verification applies to every order or only to orders that trip risk signals (blacklist match, VPN/proxy, disposable email, high velocity, prior RTO). Genuine repeat customers can be whitelisted, and the manual review queue lets your team allow a flagged order in one click. We tune thresholds with you during setup so you stop fraud without adding friction for good buyers.

Is the device fingerprinting and data handling privacy-compliant?

The plugin stores fraud-relevant signals (IP, hashed device fingerprint, verification events) as order/customer meta on your own server — nothing is sent to a third-party SaaS unless you enable an external VPN/disposable-email lookup, which is configurable. Because the data lives in your WordPress database, you control retention; the WP-Cron pruning job can auto-delete old logs to support your GDPR/PDPA retention policy. We'll document exactly what is collected so you can update your privacy notice.