FraudShield is a WooCommerce plugin that checks the buyer's IP address when an order is placed and assigns a fraud risk score from 0 to 100. Based on that score, orders can be automatically held, cancelled, or flagged for manual review. Store admins receive email alerts with a full breakdown of what triggered the score.
The fraud check runs after order creation and has no impact on checkout speed or customer experience.
FraudShield connects to the ipgeolocation.io Security API and evaluates the response against the fraud signals you have enabled. The score is calculated as:
(sum of triggered signal weights) / (sum of enabled signal weights) x 100
This keeps scoring consistent regardless of how many signals are turned on.
- Automatic fraud check on every new order
- 9 configurable fraud signals with adjustable weights
- Critical override option to force a score of 100 on any signal
- Hold, cancel, or flag high-risk orders automatically
- Smart payment detection — never auto-cancels online payments to prevent unrefunded charges
- Email alerts with full signal breakdown
- Configurable score thresholds for alerts and actions
- Dashboard with order stats and risk trend charts
- Fraud log with filtering and search
- Risk score column in the WooCommerce orders list
- Per-order fraud details panel in the admin
- Test mode with predefined IPs for safe testing
- Log retention control with automatic cleanup
| Signal | Description |
|---|---|
| Country mismatch | Billing country differs from IP geolocation country |
| VPN detected | IP is identified as a VPN |
| Tor exit node | Traffic routed through the Tor network |
| Proxy detected | IP is a known proxy server |
| Residential proxy | Harder-to-detect proxy type |
| Known attacker IP | IP flagged in threat intelligence feeds |
| Bot traffic | Automated or non-human request detected |
| Spam source | IP associated with spam activity |
| Cloud/datacenter IP | IP belongs to a cloud or datacenter provider |
| Tier | Score Range |
|---|---|
| Low | 0 to 40 |
| Medium | 41 to 70 |
| High | 71 to 100 |
- WordPress 5.8 or higher
- WooCommerce 6.0 or higher
- PHP 7.4 or higher
- An API key from ipgeolocation.io (free plan available)
- Download the plugin zip file
- Go to Plugins > Add New > Upload Plugin in your WordPress admin
- Upload the zip and activate the plugin
- Go to FraudShield > Settings
- Enter your ipgeolocation.io API key and click Test Key
- Configure your signals, weights, and thresholds
- Click Save Settings
This plugin uses the ipgeolocation.io API. When an order is placed, the customer's IP address is sent to ipgeolocation.io servers to retrieve security information used for fraud scoring. No other personal data is transmitted.
This plugin includes Chart.js v4.4.1 for admin dashboard charts, licensed under the MIT License.
This plugin is licensed under the GNU General Public License v2.0 or later.