Blacklist Manager is a powerful anti-fraud and spam-prevention plugin for WooCommerce and WordPress forms. WooCommerce Anti-Fraud & Checkout Verification & Spam Prevention blocks fraudulent orders, fake registrations, and spam form submissions by banning IPs, email addresses, and phone numbers —and now also detecting fraud using advanced Device Identity tracking across orders. at checkout or on contact forms. With real-time blacklist checks, you can stop chargebacks, unwanted sign-ups, and abusive bots before they hit your store.

Easily blacklist phone numbers, email addresses, IP addresses, and email domains to block unwanted users from placing orders, submitting forms, canceling transactions, or registering accounts. Whether you’re running an online store or collecting leads through forms, Blacklist Manager adds a critical layer of defense to your site.

Originally built for WooCommerce, it now extends its protection to popular form plugins including Contact Form 7, Gravity Forms, and WPForms.

Global Blacklist | Premium version | Documentation | Support | Demo

Core Features

Real-Time Blacklist Blocking: Instantly block customers by IP, email, or phone number during checkout or form submission.
Easy Blacklist Management: Easily add the phone number, email address, ip address from the order page; multi ip addresses/domains addition into blocking list.
Multi Notifications: Email, alert and error notices for both admin and users are customizable.
WooCommerce Order Protection: Prevent fake orders, duplicate orders, and fraudulent transactions.
Comment / Review Blocking: Automatically block comments and reviews from blacklisted emails.
Prevent Registration: Option to prevent registration if the email/ip/domain is on the Blocklist.
Form Spam Shield: Integrates with Contact Form 7, Gravity Forms, WPForms—blocks blacklist matches on all major WordPress forms.
Timed Cancellation: Option to cancel the order if the email/phone is on the Blocklist in the delay of time.
Email Verification: Customers are required to verify their email by entering a code sent to them during checkout to complete their order.
Phone Verification: Customers must verify their phone number by entering an SMS code received during checkout before proceeding with their order.
User Blocking: When the order has been placed by a user and has been added to the Blocklist, then the user is also set as blocked.
WooCommerce REST API Protection: Block blacklisted IPs, emails, phone numbers, and domains from creating orders through WooCommerce REST API integrations or external apps.

Universal Checkout Compatibility

Our plugin is compatible with all types of checkout pages, including WooCommerce Classic, Block-based Checkout, and third-party checkout plugins.

Premium Features

Building on the robust features of the free version, the premium version offers advanced functionalities to safeguard your business against fraud and unauthorized transactions.

Advanced Blocking

Customer Name Blocking: Adds the first and last name of the customer to the blocklist.
Device Identity Tracking (New): Track customer devices across orders using advanced fingerprinting. Detect suspicious behavior even when emails, phone numbers, or addresses change.
Device-Level Blocking: Identify and block suspicious devices based on their activity, linked identities, and behavior patterns across orders.
Address Blacklisting: Block orders from specific billing and shipping addresses listed in your blocklist.
Block Comment / Review: Completely block comments and reviews from blacklisted emails, IPs, or domains.
Prevent Submission: Block form submissions from Contact Form 7, Gravity Forms, and WPForms if the IP address is on the Blocklist.
Prevent VPN & Proxy Submission: Automatically block form submissions and registrations if the visitor is using a Proxy server or VPN connection.
IP Access Prevention: Stop users from accessing your website from IP countries that you have selected.
Browser Blocking: Restrict accessing your website for users of browsers.
Prevent Disposable Emails: Block orders and registration if the customer uses a disposable email address.
Prevent Disposable Phones: Block orders and automate adding to the blocklist if the customer is using a disposable phone number.
Optional Payment Methods: Disable the payment methods for the customers are in the Suspects list.

Global Blacklist Decisions

The Global Blacklist Decisions service helps protect your store by checking customer email, IP, phone, and address against a shared fraud-prevention database. It identifies suspicious or high-risk identities used in fraudulent activity across multiple merchants, giving you real-time warnings before the order is processed. This reduces payment fraud, prevents stolen-card testing, and lowers the risk of chargebacks, helping your business stay safe without slowing down checkout.

Know more about the Global Blacklist Decisions

Device Identity & Behavioral Fraud Detection (New)

Take fraud detection beyond static data with our new Device Identity system. Instead of relying only on email, phone, or IP, Blacklist Manager now tracks how devices interact with your store across multiple orders.

This system builds a relationship between devices and identities, allowing you to detect hidden patterns and stop fraud earlier.

Key capabilities include:

Device Fingerprinting: Capture device_id, session_id, and fingerprint signals to uniquely identify customer devices.
Cross-Identity Tracking: Link one device to multiple emails, phone numbers, IPs, and user accounts.
Device vs Identity Detection: Detect when the same device is used with different emails, phones, or addresses.
Device Identity Spread Analysis: Identify devices connected to an unusually high number of identities—a strong indicator of fraud or abuse.
Device-Based Order Attempts: Detect repeated orders from the same device even when identities change.
Admin Device Dashboard: View device activity, linked identities, and behavior directly from the admin panel.

This feature enables behavioral fraud detection—catching suspicious patterns that traditional blacklist systems cannot detect.

Fully Automation

Fully Automated-Protecting against fraud and unauthorized transactions, hands-free to focus on growing your E-commerce website!

Set risk score thresholds: Manually adjust each rule’s risk value!
Choose the right score: Select a score for every option to let your own rules work.
Check phone and email: Check the phone number and email address that were used in multiple orders but with a different IP or customer address.
Device behavior rules: Detect when a single device is used across multiple identities (email, phone, address).
Device spread detection: Identify abnormal activity when one device links to too many users or orders.
Device-based order attempts: Detect repeated checkout attempts from the same device even with different details.
Check order value & attempts: Make sure the order value isn’t abnormal and the customer has placed too many orders within the time period.
Suspects the IP address: Detect the customer that uses a VPN or proxy server and the IP’s country mismatches with the billing country.
Detect IP coordinates: Action if the IP coordinates radius does not match the address coordinates radius.
Card country & AVS checks: High-level checking of the payment card country and billing country is not the same, also AVS.
Set High risk card country: Manually establishing the list of nations in order to safeguard payments made via your website.
Suspicious PayPal payer: Detect PayPal accounts that have been linked to multiple customer profiles, use mismatched billing information.
Blacklist based on order statuses: Set the statues to automatically add the customer to the suspect and blocked list.

Explore the Automation features

Powerful Recording Activity Logs

Gain full visibility into every interaction and decision with Powerful Recording Activity Logs. This feature continuously tracks and documents all blacklist detections and user activities, giving you the transparency and control you need to stay ahead of fraud and suspicious behavior.

With comprehensive logging, the plugin records:

Detection Attempts: Every time a user triggers a blacklist rule—whether by email, phone, IP, or address—it’s logged with a timestamp for easy traceability.
Device Activity Logs: Track device-level activity, linked identities, and order behavior for deeper investigation.
Admin Actions: Logs when entries are added, edited, removed, or manually overridden by store staff, ensuring accountability across your team.
Checkout Blocks: Captures blocked checkout attempts along with detailed user input and cart contents, so you always know what was stopped—and why.

By storing detailed activity logs in a structured and searchable format, this feature empowers you to review patterns, strengthen your security rules, and make informed decisions backed by data—all without lifting a finger.

Learn more about this feature

Real-time Automatic Validation

Our plugin ensures a seamless and error-free checkout experience with Real-time Automatic Validation. This feature automatically validates customer-provided details, including names, email addresses, and phone numbers, as they are entered. By detecting and alerting users of issues such as incomplete or invalid data, it helps to reduce errors and ensure compliance with your data integrity rules.

With intelligent validation logic, the plugin checks for:

Name Validation: Detects invalid characters, excessive spaces, repeated characters, and ensures adherence to your custom length rules.
Email Validation: Confirms that email addresses are correctly formatted and free from common typos or invalid domains.
Phone Validation: Verifies phone numbers against predefined formats and country codes, with optional integration for SMS-based verification with the popular services Twilio and Textmagic.

This real-time validation not only improves the user experience by providing instant feedback but also ensures that your customer database remains accurate and clean.

Prevent Orders and Access from Bots

Protect your WooCommerce store from automated abuse with a layered, invisible anti-bot system designed to stop fake orders without affecting real customers.

Advanced bot detection: Blocks automated checkout, login, registration, and comment spam using behavioral and session-based analysis.
Frontend execution proof: Verifies that checkout requests come from real browsers running JavaScript, not scripted bots.
Session continuity validation: Detects and blocks bots that skip normal cart and checkout flow.
Browser fingerprint anomaly detection: Identifies headless browsers, automation tools, and abnormal client behavior using risk-based scoring.
Invisible verification layers: Seamlessly integrates Google Cloudflare Turnstile, reCAPTCHA v3/v2, and hCaptcha with no friction for legitimate users.
API & Blocks checkout protection: Secures Classic Checkout, Block-based Checkout, and Store API endpoints from direct bot abuse.
Efficient and lightweight: Enterprise-grade protection that runs silently without slowing down your store.

Payment Detection & Protection

Our plugin integrates seamlessly with leading payment gateways—Stripe, PayPal, and Mollie—to provide advanced fraud detection and prevention.

With built-in checks, it automatically detects mismatches such as card country vs. billing country, flags transactions from high-risk countries, and validates payments using AVS (Address Verification Service) when available. For Stripe, it leverages the Stripe Fraud Analysis results directly within the order screen to help you quickly identify risky transactions. For PayPal, it introduces a payer email verification requirement to ensure that the PayPal account holder’s identity matches the order details, reducing the chance of fraudulent use.

These protections add an extra layer of security to your store, helping you block suspicious orders before they result in costly chargebacks.

Blacklist Connection for Multiple Sites

Blacklist Connection allows you to sync and consolidate blacklists from multiple WooCommerce stores or Sites, creating a centralized network of blacklisted emails, phone numbers, IP addresses, customer addresses, and email domains. This unified blacklist ensures a comprehensive defense against fraud across all your online stores and websites, improving security and saving you time.

Ideal for multi-store and websites owners and agencies managing numerous client sites—save time and boost security.

See more about Blacklist Connection feature

Permission Settings

The Permission Settings feature of our plugin allows you to set both default and custom user roles to control access to the Dashboard, Notifications, and Settings. Tailor the access levels to ensure that only the appropriate users can manage and view the plugin’s critical features.

Import / Export

Easily manage your blacklist data with our Import/Export feature. Quickly upload entries via CSV or export your blacklist data for backup, review, or migration purposes, ensuring seamless data management.

Enhanced Protection

Our premier solution for combating fraud and unauthorized transactions: we’ve integrated up with the finest third-party services to deliver the highest level of protection for your business. Each service we chose excels in identifying and preventing fraudulent activities. Moreover, these services offer free plans designed to support small and medium-sized businesses, enabling you to focus on growth while safeguarding your transactions.

Plugin supported

Plugin integrations

Service integrations

Premium Support

Access our Premium Support site

Dedicated Assistance: Access to our premium support team for any issues or questions you may have.
Priority Response: Receive faster response times and personalized support to ensure your plugin operates smoothly.

Explore the Premium version here

With these premium features and dedicated support, the Blacklist Manager Premium plugin provides unparalleled security and efficiency, giving you peace of mind and allowing you to focus on growing your business.

Blacklist Manager Community

By using this plugin, your store automatically becomes part of the Blacklist Manager Community.
This community-driven network helps strengthen fraud protection by sharing and consolidating blacklisted data (emails, phone numbers, IP addresses, etc.) across participating stores.

Your contribution helps create a safer eCommerce ecosystem while protecting your own store more effectively.

Use Cases

Stop fraudulent WooCommerce orders and prevent chargebacks.
Block spam submissions on registration or contact forms.
Enforce email/phone verification at checkout.
Maintain a dynamic blacklist across your entire WordPress site.

Blacklist Manager – WooCommerce Anti-Fraud & Checkout Verification & Spam Prevention