XeroWP
UserCheck

UserCheck

5/5 (1 ratings) 100 active installs Updated Aug 26, 2026
anti-spamdisposable emailemail validation
Download v0.3.2 Plugin Website

UserCheck blocks disposable and throwaway email addresses from your sign-up forms. The result: less spam, fewer fake accounts, and a cleaner user base.

Supported plugins

If you’re using any of these, UserCheck protects them automatically — nothing to configure:

  • WordPress core (registration, comments, multisite signup, profile email change)
  • WooCommerce (classic checkout, Cart/Checkout Block, account registration, Edit-account email change)
  • Profile Builder (free + Pro)
  • Contact Form 7
  • WPForms
  • Elementor Pro Forms
  • Gravity Forms
  • Fluent Forms
  • Ninja Forms
  • Formidable Forms
  • MailPoet

Fallback for unsupported plugins

For plugins without a built-in integration, you can explicitly enable a fallback check under Settings UserCheck Coverage. It runs only on POST submissions, skips existing users and login attempts, and stays out of dashboard reads and background tasks.

Choose what to block

Pick which kinds of email addresses get blocked: domains that can’t receive email, disposable addresses, public providers (Gmail, Yahoo, etc.), forwarding services that hide the real address, and known spammers. Domains on your UserCheck account blocklist are always blocked.

Lightweight by design

Emails are checked only when users submit a form (registration, comment, checkout) — never re-checked for existing users or orders. No background scans, no surprises.

Resilient by design

If our service is ever down or slow, your site keeps working: sign-ups go through and the error is logged for review. Each request times out after 2 seconds, so an unresponsive API can’t hold up your forms.

Full email or domain only

Send the full email (more accurate) or just the domain.

Extensible

Developers can plug UserCheck into any plugin’s validation hook by calling UserCheck::instance()->evaluate_email( $email ) and acting on the returned action, reason, and message.

Translation ready

All text in the plugin can be translated into any language.

Works out of the box

No configuration required. A free API key unlocks higher request limits.

Powered by UserCheck, which tracks new disposable email providers as they appear so your site’s protection stays current.

Privacy Policy

The plugin sends the email address (or just its domain, depending on your settings) to the UserCheck API for validation. The request User-Agent identifies the plugin version, WordPress version, site URL, and which integration triggered the check (e.g. wp_registration, wc_checkout, or fallback_is_email/<plugin-slug> when the fallback fires for an unsupported plugin). No other end-user data is sent. For more information on how UserCheck handles data, please visit https://www.usercheck.com/privacy.