How to Use Block Recommendations in the Fraud Prevention Plugin
Fraud Prevention can scan past orders and suggest values to add to your blacklist. It looks for repeated signals on failed, cancelled, on-hold, or high-score orders, then shows the 10 strongest suggestions.
Nothing is added until you click Block on a card. Use this when you want a short list to review instead of scrolling every order.
For example, the same email appears on several failed checkouts. The scan can suggest that email. You approve it, and it is added to Blocked Email Addresses.
In The Article
Benefits
Block Recommendations help you:
- Find repeat fraud signals without opening every order
- See why a value was suggested before you block it
- Add one approved value to the existing blacklist
How to Run Block Recommendations
Step 1: Open Blacklist Settings
Go to Fraud Prevention → Blacklist Settings.
Next to Basic configuration settings, click Block Recommendation.
This needs WordPress 6.9 or newer. If your site is older, the page shows: Block Recommendation requires WordPress 6.9 or newer because it uses the Abilities API.
Step 2: Start the scan
The Block Recommendations popup opens and starts scanning. Status text is Scanning historical orders… plus a progress count.
Wait until you see Order scan complete. The scan ranks repeated signals from failed, cancelled, on-hold, or high-score orders.
Step 3: Review the top suggestions
The list heading is Top 10 fraud-related block suggestions.
Each card can show:
- Type and value (email, IP, domain, phone, name, address, ZIP, state, or country)
- Confidence (high or medium)
- How many risky orders matched
- Payment failures, rule score, and AI score when those exist
- Sample order numbers and products
If nothing repeats enough, you see: No repeated fraud signals met the recommendation threshold.
Common public email domains and private or local IPs are not suggested.
Step 4: Approve a recommendation
- Click Block on a card you agree with.
- That value is added to the matching blacklist field on the same page. The button changes to Blocked.
- Repeat for any other card you want.
- Click Save Changes if you also edited other blacklist fields on the page.
Close the popup with × or click outside it.
Example Use Cases
The same email on several failed orders
Run the scan, open the email card, check the order numbers, then Block.
A public IP on cancelled or on-hold orders
Approve the IP suggestion if the evidence looks like fraud, not shared office traffic. Private and local IPs are not recommended.
A store that already blocked the obvious repeats
If every strong signal is already on the list, the scan can return no suggestions. That is expected.
Conclusion
Open Blacklist Settings, click Block Recommendation, wait for the scan, then approve only the cards you trust. The plugin suggests from historical risky orders. It does not blacklist anything until you click Block.
FAQs
1. Where is Block Recommendation?
Fraud Prevention → Blacklist Settings, next to Basic configuration settings.
2. Does the scan add values by itself?
No. The popup says nothing is blocked until you approve it. Only Block writes that value to the blacklist.
3. Why is a common domain or my office IP missing?
Common consumer email domains are not suggested. Loopback and private IPs are not suggested. Values already on the blacklist are also skipped.
4. Why do I see a WordPress 6.9 message instead of the button?
Block Recommendation uses the WordPress Abilities API, which needs WordPress 6.9 or newer.