Review suspicious WooCommerce orders before fulfillment.

Fraud Risk Rules Lite for WooCommerce helps store owners score suspicious WooCommerce orders using local, rule-based risk checks. It adds risk scores, review flags, blocklists, allowlists, order notes, admin alerts, and optional on-hold automation without connecting to external fraud APIs.

This plugin is designed as a lightweight WooCommerce order review assistant. It does not try to replace your payment gateway’s fraud tools, and it does not promise complete fraud prevention. Instead, it helps you notice risky orders before fulfillment, so you can review them more consistently before shipping.

Why this plugin exists

Not every risky order is clearly fraudulent. Some orders simply need a second look before fulfillment, such as first-time high-value purchases, blocked emails, suspicious email domains, country mismatches, repeated orders from the same email or IP, risky payment methods, or failed order history.

Fraud Risk Rules Lite adds a local risk score to each WooCommerce order so store administrators can review suspicious orders faster and with clearer reasons.

Key Features

- Local WooCommerce order risk scoring from 0 to 100
- Risk labels: Low, Medium, High, and Critical
- Risk Score column in the WooCommerce Orders list
- Order detail Risk Box with triggered rules and review actions
- Email, phone, IP, country, and email-domain blocklists
- Email, email-domain, and user-role allowlists
- Adjustable rule weights for each risk rule
- Optional automatic on-hold status for high-risk orders
- Optional admin alerts using WordPress wp_mail()
- Manual review actions: Mark as safe and Mark as risky
- Risk notes saved to WooCommerce order notes
- Risk Log screen for recent assessments
- CSV export for High and Critical risk orders
- CSV injection protection for exported values
- WooCommerce HPOS compatible
- No external fraud API connection
- No credit card data access

Included Risk Rules

- Email in blocklist
- Phone in blocklist
- IP in blocklist
- Billing or shipping country in blocklist
- Suspicious email domain
- First order high value
- Billing and shipping country mismatch
- High order total
- High quantity order
- Risky payment method
- Multiple orders in a short time window
- Failed or cancelled order history
- Guest high-value order
- Coupon + high value + first order combination

Built for a safe Lite workflow

Fraud Risk Rules Lite is intentionally focused. It does not add external APIs, AI scoring, MaxMind, proxy or VPN detection, SMS verification, pre-payment blocking, card validation, or chargeback management.

This keeps the plugin lightweight, easier to understand, and safer for small WooCommerce stores that want a practical order review workflow without sending order data to an outside fraud service.

What this plugin does not do

- It does not guarantee fraud prevention.
- It does not detect every fraudulent order.
- It does not replace your payment gateway’s fraud tools.
- It does not manage chargeback disputes.
- It does not read, store, or process credit card details.
- It does not send order data to an external fraud API.
- It does not block checkout before payment.
- It does not include proxy, VPN, Tor, or IP geolocation detection.
- It does not provide SMTP email delivery by itself.

Requirements

- WordPress 7.0
- WooCommerce 10.0 or higher
- Tested with WooCommerce 10.9.1
- PHP 7.4 or higher
- WooCommerce must be installed and active
- Administrator access with WooCommerce management permission

HPOS Compatibility

Fraud Risk Rules Lite is built with WooCommerce CRUD methods and declares compatibility with WooCommerce High-Performance Order Storage.

The plugin has been tested with HPOS enabled and disabled.

Admin Email Note

Admin alerts use WordPress wp_mail(). Actual email delivery depends on the store’s WordPress mail configuration, SMTP plugin, or hosting mail setup.

Recommended Use

Start with automation disabled.

First, review the default scoring rules and thresholds in WooCommerce > Fraud Risk. Then test the score behavior against your own store’s normal orders. After you understand the scoring pattern, you can optionally enable automatic on-hold status and admin alerts.

The safest workflow is:

1. Review the dashboard and risk settings.
2. Check new orders in the WooCommerce Orders list.
3. Open suspicious orders and review the Risk Box.
4. Use Mark as safe or Mark as risky when needed.
5. Enable on-hold automation only after testing your thresholds.
6. Export High and Critical orders when you need external review.

Who this plugin is for

Fraud Risk Rules Lite is useful for WooCommerce store owners who want a lightweight way to review suspicious orders before fulfillment.

It is best suited for stores that want:

- Local rule-based scoring
- Simple blocklists and allowlists
- A visible order risk score
- Admin review before fulfillment
- Optional on-hold automation
- No external fraud API dependency
- No credit card data handling

Who this plugin is not for

This plugin is not for stores that need enterprise fraud prevention, machine learning fraud detection, chargeback management, device fingerprinting, proxy/VPN detection, or payment-level fraud blocking.

If you need those capabilities, use your payment gateway’s fraud tools or a dedicated fraud prevention platform.

Disclaimer

This plugin helps flag suspicious orders using local rules. It does not guarantee fraud prevention, does not replace your payment gateway’s fraud tools, and does not manage chargeback disputes.

Author and Support

Created by SG Group.

Support / Contact:
https://sggroup.jp/contact/

Codester Profile:
https://www.codester.com/SGGro...

- Local WooCommerce order risk scoring from 0 to 100
- Low, Medium, High, and Critical risk labels
- Risk Score column in WooCommerce Orders list
- Order detail Risk Box with triggered rules
- Email, phone, IP, country, and email-domain blocklists
- Email, email-domain, and user-role allowlists
- Adjustable rule weights
- Optional automatic on-hold status for risky orders
- Optional admin alerts via WordPress wp_mail()
- Manual actions: Mark as safe / Mark as risky
- Risk notes saved to WooCommerce order notes
- Recent Risk Log screen
- High/Critical order CSV export
- CSV injection protection
- WooCommerce HPOS compatible
- No external API required
- No credit card data access

- WordPress 7.0
- WooCommerce 10.0 or higher
- Tested with WooCommerce 10.9.1
- PHP 7.4 or higher
- WooCommerce must be installed and active
- Administrator access with WooCommerce management permission
- WordPress mail configuration is required for actual admin email delivery

1. Download the main ZIP file from Codester.
2. Extract the downloaded package on your computer.
3. Open the Plugin folder.
4. Upload fraud-risk-rules-lite-for-woocommerce.zip from WordPress Admin > Plugins > Add New > Upload Plugin.
5. Activate the plugin.
6. Make sure WooCommerce is installed and active.
7. Go to WooCommerce > Fraud Risk.
8. Review the default rule weights, thresholds, blocklists, allowlists, and automation settings.
9. Keep automation disabled until you have reviewed the scoring behavior on your own store.
10. Optional: enable automatic on-hold status and admin alerts after testing your thresholds.
11. Review suspicious orders from the WooCommerce Orders list or the order detail Risk Box.
12. Use CSV export when you need to review High and Critical risk orders outside WordPress.