Woke up to thousands of $1 failed transactions and a Stripe account warning?

KossLabs Anti-Carding & Bot Shield halts automated card testing attacks directly at your checkout before malicious requests hit payment gateways (Stripe, PayPal, Authorize.net) and trigger expensive authorization fees ($0.15 – $0.50 per attempt).

Works out of the box with zero configuration:
– Instant Protection: Honeypot, HMAC timestamp validation, and RAM-based IP rate limiting are active immediately upon activation.
– Cloudflare Turnstile Ready (BYOK): Optional frictionless bot challenge with zero vendor lock-in.
– Dual-Shield Architecture: Fully compatible with Classic Checkout and modern WooCommerce Checkout Blocks (Store API).
– Zero Bloat: Runs entirely in RAM (Transients API / Redis / Memcached). No custom database tables.

Privacy Policy & External Services

This plugin integrates with Cloudflare Turnstile to protect your checkout against card testing and automated bot abuse.

Service: Cloudflare Turnstile
Provider: Cloudflare, Inc.
Service Description: Frictionless, privacy-preserving bot detection challenge.
Terms of Service: https://www.cloudflare.com/website-terms/
Privacy Policy: https://www.cloudflare.com/privacypolicy/
Data Transmitted: During checkout, the customer’s IP address and Turnstile response token are transmitted to Cloudflare’s validation endpoint (https://challenges.cloudflare.com/turnstile/v0/siteverify) to verify whether the submission is from a legitimate human. Store owners use their own Cloudflare account credentials (BYOK).

Anti-Carding & Bot Shield for WooCommerce (Stop Card Testing Attacks)

Privacy Policy & External Services