

WooCommerce Anti Fraud
WooCommerce Anti Fraud is a WooCommerce plugin by WooCommerce that checks incoming orders for signs of fraud. It assigns each order a risk score, then cancels, holds or flags suspicious ones based on rules you set, with extra tools aimed at card testing attacks.
- Version
- 8.0.7
- Released
- Oct 6, 2026
- Developer
- WooCommerce
- Type
- WordPress plugin
- Requires
- WooCommerce
- Licence
- GPL
- Included in
- Every plan, or $8.79 a year on its own
What’s new in WooCommerce Anti Fraud 8.0.7
- ImprovedAdded protection against WooCommerce Add Payment Method and Braintree verification abuse.
- ImprovedMade PayPal Checkout Hardening CAPTCHA provider-agnostic and added Cloudflare Turnstile support.
- ImprovedPrevented legitimate third-party/API order flows, including LitCommerce, NetSuite, and ClassWallet, from being incorrectly blocked.
- ImprovedImproved card-testing detection and enforcement to better protect against repeated payment attempts.
- FixedFixed failed card attempts being counted before gateway processing, ensuring configured card-testing limits are enforced correctly.
- FixedFixed pre-payment checks incorrectly rejecting orders below the configured High Risk threshold.
- FixedFixed imported Etsy orders being incorrectly identified as Unknown Origin during scheduled fraud checks.
- FixedFixed a logger issue that could cause a fatal error and take the site offline.
What it does
Fraudulent orders and card testing attacks cost store owners time, chargebacks and stock. This plugin monitors orders as they come in and uses AI and machine learning to assign each one a risk score. Based on that score and your rules, it can block an order, put it on hold, cancel it or flag it for review. It runs inside WooCommerce, which it requires, so fraud checks happen alongside your normal order flow.
You get more than 70 settings to shape how protection works for your store. Block by country, IP address (IPv4 and IPv6), proxy or email, and set behavior rules by time of day, order value, purchase volume or order attempts. Trusted customers go on a whitelist, and a dashboard shows recent fraud attempts and risk scores. It also connects with services such as MaxMind and Trust Swiftly, and supports Google reCAPTCHA and Cloudflare Turnstile at checkout.
Best for
- WooCommerce stores dealing with fraudulent orders or chargebacks
- Shops targeted by card testing or bot checkout attacks
- Agencies managing fraud rules for client WooCommerce stores
Features
Each order is scanned in real time with AI and machine learning, given a risk score, and blocked when it looks fraudulent.
Block suspicious activity by country, IPv4 or IPv6 address, detected proxy, or email address to stop repeat offenders before they place orders.
Dedicated velocity tools detect rapid, repeated payment attempts and enforce the card testing limits you configure, helping stop brute force carding on your checkout.
Set rules around time of day, order value, purchase volume or number of order attempts so unusual buying patterns get caught and reviewed.
A dedicated whitelisting page lets you manage trusted IPs and emails, and you can import many trusted addresses in one action.
Google reCAPTCHA integration blocks bots and automated carding at checkout, and PayPal Checkout hardening also supports Cloudflare Turnstile.
Configurable rules automatically cancel, hold or flag suspicious orders, and instant email alerts tell you when something suspicious happens.
Review recent fraud attempts, order risk scores and email blocking activity in one place, with a mobile-friendly layout for checking from any device.
WooCommerce Anti Fraud older versions
- 8.0.6Sep 221 fix
- 8.0.4Sep 31 new, 1 improvement, 6 fixes
- 8.0.3Aug 152 improvements, 6 fixes
- 8.0.2Aug 4
- 8.0.1Jul 30
- 8.0.0Jul 8
- 7.2.6May 8
- 7.2.5Apr 28
- 7.2.4Mar 29
- 7.2.3Mar 17
Members and buyers of this product can download older versions.
68 older versions in all. If you need one that is not listed, ask support.
Questions about WooCommerce Anti Fraud
Does it work with third-party fraud services?
Yes. It connects with services such as MaxMind and Trust Swiftly to add more data to its fraud checks. It also uses geolocation data to spot high-risk orders, even without a full BigDataCloud configuration.
Will it block legitimate orders from integrations or marketplaces?
The plugin is designed to let legitimate third-party and API order flows through, including LitCommerce, NetSuite and ClassWallet. Imported Etsy orders are also recognized correctly during scheduled fraud checks, and you can whitelist trusted IPs and emails.
Can I choose what happens to a suspicious order?
Yes. You set rules that decide whether a suspicious order is cancelled, placed on hold or flagged for review. With more than 70 settings, you can tune risk thresholds, blocking rules and behavior limits to match how your store operates.
Does it protect payment method pages as well as checkout?
It includes protection against abuse of the WooCommerce Add Payment Method page and Braintree verification, alongside checkout CAPTCHA options and card testing detection that limits repeated payment attempts.
Is WooCommerce Anti Fraud free?
The code of WooCommerce Anti Fraud is licensed under the GPL, so anyone may use, change and share it. GPL Feast is a paid service: a plan or a single purchase gives you the download and automatic updates. The developer's own support, licence key and online services are not included.
Which version of WooCommerce Anti Fraud is this?
Version 8.0.7, released Oct 6, 2026. New versions appear here when the developer publishes them, and members get them as automatic updates.
How do I update WooCommerce Anti Fraud?
Install the free GPL Feast Updater on your site and connect it with your API key. It installs new versions of WooCommerce Anti Fraud automatically and keeps a backup, so you can roll back.
What does WooCommerce Anti Fraud need?
WooCommerce Anti Fraud needs WooCommerce installed and active.
More from WooCommerce







