E-commerce fraud: fake orders, card testing and checkout spam

Card testing and fake orders cost stores in payment fees, chargebacks and time. These guides show how to spot the attacks and block them at checkout, with settings for WooCommerce, SureCart, FluentCart and more.

16 guides

5 Ways to Stop Fake Orders in FluentCart

To stop fake orders in FluentCart, start with an order-screening plugin like oopspam Anti-Spam. It checks every order against 500M+ known malicious IPs and emails, blocks VPNs and cloud servers, rate limits checkout, and blocks countries you do not serve.

7 min read

FluentCart vs WooCommerce: Which Plugin Should You Use?

WooCommerce is the safer pick for physical stores, complex shipping, and niche features, backed by 7+ million installs and a huge extension marketplace. FluentCart is the better pick for digital products, subscriptions, and software licenses, because those features come built in…

9 min read

SureCart vs FluentCart: Which Plugin Should You Use?

Choose SureCart if you want a managed, cloud-based checkout with growth tools built in and no server tuning. Choose FluentCart if you want a fully self-hosted store that keeps every order inside your own WordPress database with zero transaction fees on any plan.

Updated 8 min read

How to Block Orders by Billing Address in WooCommerce

The fastest way to block orders by billing address in WooCommerce is to install a dedicated anti-fraud plugin like oopspam Anti-Spam, enter the addresses, cities, or PO boxes you want to reject in its “Block orders with specific billing addresses” field, and save. No coding…

5 min read

How to Block Specific Order Amounts in WooCommerce

If your WooCommerce store keeps getting fraudulent orders for the same odd amounts, you’re likely dealing with card testing bots. The fastest fix is a plugin that blocks orders by exact total. oopspam Anti-Spam is a strong option to start with since it combines specific-amount…

5 min read

How to Protect Your Store from Fake Orders, Card Testing, and Checkout Spam

Card testing and checkout spam are no longer occasional nuisances. Attackers now run large scale, automated attempts against checkout pages, and the tools that stop them are the same ones that have protected stores for years: CAPTCHA or Turnstile at checkout, AVS and CVV…

6 min read

Best Fraud Detection Plugins for WordPress in 2026

If you run a WordPress site, whether it sells products or captures leads, you need a dedicated fraud detection plugin. General security tools like Wordfence protect your site from hackers, but they do nothing to stop fraudulent orders, fake signups, stolen credit card abuse, or…

8 min read

Defending WooCommerce: How we blocked 450,000 card testing attempts in one week

We recently stopped the largest WooCommerce card testing attack we’ve seen. Attackers targeted PayPal, credit, and debit card processors across multiple stores, creating thousands of failed orders marked with Origin = “Unknown.”

5 min read

How to Prevent Fake Orders in Shopify with Shopify Flow and oopspam

In our previous article, I discussed how nearly 90 apps in the Shopify store claim to block countries and offer similar blocking features, yet most are ineffective and easily bypassed. After exploring Shopify further to find a truly reliable solution, I discovered Shopify Flow.

6 min read

WooCommerce vs SureCart: Which Plugin Should You Use?

Adding an online store to your WordPress site is easier than ever, but the real question is—which eCommerce plugin should you trust to run your business? Two top contenders today are WooCommerce and SureCart, each offering a distinct approach to selling online.

8 min read

5 Ways to Stop Fake Orders in SureCart

Fake orders and spam transactions are more than just annoying, they cost time, money, and customer trust. If you’re using SureCart, keeping these fraudulent orders out is critical for a secure and reliable store experience.

5 min read

How to Stop Failed Orders with Unknown Origin in WooCommerce

Failed orders with an “Unknown” origin in WooCommerce are a growing problem, mainly caused by automated card testing attacks. These attacks flood your store with thousands of failed transactions, clogging up your orders, damaging your email reputation, and even affecting payment…

Updated 5 min read

Card Testing Attacks: A New Threat Vector Through WooCommerce Block-based Checkout

Recent incidents have highlighted a concerning trend in e-commerce security: card testing attacks specifically targeting WooCommerce stores using the Block-based Checkout feature. While this modern checkout experience offers enhanced flexibility and user experience, it has…

Updated 4 min read

How to Protect Your E-commerce Site from Spam Attacks

Spam attacks on e-commerce sites are no longer a rare occurrence. They’ve become a persistent threat, especially during the holiday shopping season.

9 min read

6 Ways to Block Spam & Card Testing Attack in MemberPress Checkouts

MemberPress is a popular WordPress membership plugin that allows you to create and manage subscription-based content, courses, and communities. While it offers robust features for membership sites, it’s important to protect your MemberPress installation from spam registrations…

Updated 5 min read

5 ways to stop spam orders and registrations in WooCommerce

WooCommerce is a go-to e-commerce plugin for WordPress. It supports different payment methods including Paypal, Stripe via add-ons, and standard payments like credit cards even cash & check payments.

Updated 11 min read