How to ban repeat offenders using email/phone/IP

Fraudulent users often place multiple risky orders using the same email, phone number, or IP address. By banning repeat offenders, you can stop them from exploiting your store and reduce chargebacks, refunds, and fake orders.

The Fraud Prevention plugin for WooCommerce allows you to ban users who repeatedly attempt fraudulent activities. (Plugin feature: Blacklist Management)

You can block based on:

• Email address (e.g., suspicious domains or flagged emails).
• Phone number (frequently reused for risky orders).
• IP address (blocks customers accessing from the same network).

This feature ensures that repeat offenders cannot bypass rules by creating new accounts or using guest checkout.

Preconditions

1. Fraud Prevention For WooCommerce plugin is installed and activated.
2. Have records of fraudulent users (emails, phone numbers, or IPs).

Step-by-Step Instructions

Step 1: Go to Fraud Prevention Settings

• From your WordPress dashboard, navigate to:

  Dotstore → Fraud Prevention → Blacklist Settings Menu.

Step 2: Add a New Rule for Banning

• In the section, add the emails, phone numbers, and IPs.
  • Block by Email
  • Block by Phone Number

  • Block by IP Address

    

Step 3: Test the Rule

• Try placing an order with the banned email/phone/IP.

• The checkout should display a notice as below:

  

Alternate Flows

• Soft Block (Manual Review): Instead of blocking, set a lower weight (e.g., 60). Orders will be flagged for admin review but not automatically blocked.
• Combination Rules: Ban users with both email + IP flagged for extra security.
• Temporary Ban: Set time-based rules (e.g., block for 30 days).

Expected Outcome

• Orders from repeat offenders using banned emails, phone numbers, or IP addresses will be blocked instantly.
• Fraudulent customers won’t be able to place new orders even if they try different names or addresses.
• Store risk reduces significantly, saving money and time on chargebacks and refunds.

⚡ Internal Note:

• IP blocking limitations: Some ISPs rotate IPs, so always combine with email or phone for stronger rules.
• Email domains: Use caution when blocking entire domains like Gmail or Yahoo (could block legitimate buyers).