UserCheck
UserCheck blocks disposable and throwaway email addresses from your sign-up forms. The result: less spam, fewer fake accounts, and a cleaner user base.
Supported plugins
If you’re using any of these, UserCheck protects them automatically — nothing to configure:
- WordPress core (registration, comments, multisite signup, profile email change)
- WooCommerce (classic checkout, Cart/Checkout Block, account registration, Edit-account email change)
- Profile Builder (free + Pro)
- Contact Form 7
- WPForms
- Elementor Pro Forms
- Gravity Forms
- Fluent Forms
- Ninja Forms
- Formidable Forms
- MailPoet
Fallback for unsupported plugins
For plugins without a built-in integration, a fallback check catches sign-ups from any other form on your site. It only runs when someone submits a form, so it won’t slow down your dashboard or background tasks. You can turn it off under Settings UserCheck Coverage.
Choose what to block
Pick which kinds of email addresses get blocked: domains that can’t receive email, disposable addresses, public providers (Gmail, Yahoo, etc.), forwarding services that hide the real address, and known spammers. Domains on your UserCheck account blocklist are always blocked.
Lightweight by design
Emails are checked only when users submit a form (registration, comment, checkout) — never re-checked for existing users or orders. No background scans, no surprises.
Resilient by design
If our service is ever down or slow, your site keeps working: sign-ups go through and the error is logged for review. Each request times out after 2 seconds, so an unresponsive API can’t hold up your forms.
Full email or domain only
Send the full email (more accurate) or just the domain.
Extensible
Developers can plug UserCheck into any plugin’s validation hook by calling UserCheck::instance()->evaluate_email( $email ) and acting on the returned action, reason, and message.
Translation ready
All text in the plugin can be translated into any language.
Works out of the box
No configuration required. A free API key unlocks higher request limits.
Powered by UserCheck, which tracks new disposable email providers as they appear so your site’s protection stays current.
Privacy Policy
The plugin sends the email address (or just its domain, depending on your settings) to the UserCheck API for validation. The request User-Agent identifies the plugin version, WordPress version, site URL, and which integration triggered the check (e.g. wp_registration, wc_checkout, or fallback_is_email/<plugin-slug> when the fallback fires for an unsupported plugin). No other end-user data is sent. For more information on how UserCheck handles data, please visit https://www.usercheck.com/privacy.