Title: Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification Author: YoOhw Studio Published: chinero 18, 2024 Last modified: setiembre 23, 2026 --- Search plugins ![](https://ps.w.org/wc-blacklist-manager/assets/banner-772x250.png?rev=3516961) ![](https://ps.w.org/wc-blacklist-manager/assets/icon-256x256.png?rev=3516963) # Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification By [YoOhw Studio](https://profiles.wordpress.org/yoohw/) [Download](https://downloads.wordpress.org/plugin/wc-blacklist-manager.2.3.2.zip) * [Details](https://arg.wordpress.org/plugins/wc-blacklist-manager/#description) * [Reviews](https://arg.wordpress.org/plugins/wc-blacklist-manager/#reviews) * [Installation](https://arg.wordpress.org/plugins/wc-blacklist-manager/#installation) * [Development](https://arg.wordpress.org/plugins/wc-blacklist-manager/#developers) [Support](https://wordpress.org/support/plugin/wc-blacklist-manager/) ## Description **Blacklist Manager** is a WooCommerce blacklist, anti-fraud, and spam prevention plugin for stores that need to block fake orders, suspicious customers, spam registrations, and unwanted form submissions. The free plugin is a complete local protection toolkit, not a Premium trial. Use blacklist rules for **phone numbers**, **email addresses**, **IP addresses**, and** email domains** at WooCommerce checkout, registration, comments, product reviews, REST API orders, and supported WordPress forms. The plugin works with WooCommerce Classic Checkout, WooCommerce Checkout Blocks, Contact Form 7, Gravity Forms, and WPForms. #### What the free plugin includes * Manage local email, phone, IP address, and email-domain entries through Suspects and Blocklist workflows. * Stop matching identities at WooCommerce checkout and protect registration, comments, product reviews, supported forms, and WooCommerce REST API orders. * Require built-in **checkout email verification** for the policies you configure. Core owns and runs email verification; phone OTP and Twilio/TextMagic SMS transport belong to Blacklist Manager Premium. * Configure free customer notices and admin alerts, then review dashboard blacklist and detection statistics. [Documentation](https://yoohw.com/docs/category/woocommerce-blacklist-manager/) | [Support](https://yoohw.com/support/) | [Demo](https://sandbox.yoohw.com/demo/yobm_demo.html) ### Key Features * **WooCommerce checkout protection**: Block or review orders using phone, email, IP address, and email domain rules. * **Suspect and blocked lists**: Review risky identities before moving confirmed abuse to the blocklist. * **Fast blacklist management**: Add entries from the dashboard or directly from the WooCommerce order screen. * **Registration protection**: Stop signups that match blocked emails, IP addresses, or email domains. * **Comment and review blocking**: Prevent comments and product reviews from blacklisted emails. * **Form spam protection**: Check Contact Form 7, Gravity Forms, and WPForms submissions against blacklist data. * **Checkout email verification**: Require a Core-owned email verification code before allowing checkout to continue. * **WooCommerce REST API protection**: Block blacklisted identities from creating orders through external apps or integrations. * **Custom notices and alerts**: Customize customer-facing block messages and admin email alerts. * **Dashboard stats**: Review blacklist entries and detection attempts from the admin area. ### Checkout Compatibility Blacklist Manager supports WooCommerce Classic Checkout, [WooCommerce Checkout Blocks](https://woocommerce.com/checkout-blocks/), and many third-party checkout plugins that use standard WooCommerce checkout and order creation flows. ### Global Blacklist Decisions Blacklist Manager can optionally connect your store to **Global Blacklist Decisions**, a separate broader-risk service that checks order identities such as email, phone, IP address, address, and email domain against network data. It is not required for local Core protection and is not a prerequisite for Premium. [Learn more about Global Blacklist Decisions](https://yoohw.com/global-blacklist-plan/) ### Premium Features Consider Blacklist Manager Premium when recurring abuse makes manual blacklist maintenance too time-consuming, when checkout or payment patterns need automatic action, when repeat attackers change individual identity fields, or when your team needs deeper investigation and audit tools. Premium is the advanced local/store extension. It adds: * Risk scoring for blacklist, identity, IP, address, payment, device, and order pattern signals. * Automation rules to auto-suspect, auto-block, or auto-review orders. * Payment intelligence for Stripe, PayPal, Mollie, Braintree, WooPayments, AVS, card country, and payer mismatch signals. * Device identity checks to link repeat abuse across emails, phones, IPs, addresses, and accounts. * Advanced blocking for customer name, address, device, disposable email, disposable phone, country, VPN, and proxy signals. * Activity logs, import/export, cleanup tools, permissions, multi-store sync, CAPTCHA, IP intelligence, geocoding, and email validation integrations. * Phone OTP runtime and Twilio/TextMagic SMS transports; Core continues to own checkout email verification. [Explore Premium](https://yoohw.com/product/blacklist-manager-premium/) ### Supported Plugins and Integrations #### Supported plugins * [WooCommerce](https://wordpress.org/plugins/woocommerce/) * [Contact Form 7](https://wordpress.org/plugins/contact-form-7/) * [Gravity Forms](https://www.gravityforms.com/) * [WPForms](https://wordpress.org/plugins/wpforms-lite/) #### Premium integrations * WooCommerce Stripe Gateway, Payment Plugins for Stripe WooCommerce, WooCommerce PayPal Payments, Payment Plugins for PayPal WooCommerce, Braintree for WooCommerce, Mollie Payments for WooCommerce, and WooPayments. * Cloudflare, reCAPTCHA v3/v2, hCaptcha, IP-api, BigDataCloud, ZeroBounce, NumCheckr, Google Maps, Twilio, and TextMagic. ### Use Cases * Block fake WooCommerce orders before payment review. * Prevent repeat abuse from known phone numbers, email addresses, IP addresses, and domains. * Reduce spam registrations, comments, product reviews, and form submissions. * Require Core email verification during checkout without installing Premium. * Add Premium phone OTP when a store also needs SMS-based phone ownership checks. * Review suspicious customers before moving them to the blocklist. * Use Global Blacklist Decisions as an additional fraud signal. ## Screenshots [[ [[ [[ [[ [[ [[ ## Installation 1. Install the plugin from **Plugins > Add New**, or upload the plugin folder to ` wp-content/plugins`. 2. Activate **Blacklist Manager** from the WordPress Plugins screen. 3. Go to **Blacklist Manager > Settings** and enable the checks that match your workflow. 4. Add phone numbers, email addresses, IP addresses, or domains to the Suspects or Blocklist lists. 5. Configure Core checkout email verification when needed. If you separately use Premium phone OTP, configure its Twilio or TextMagic transport in Premium. ## FAQ ### Do I need to configure settings after installation? Yes. Go to **Blacklist Manager > Settings** and enable checks for checkout, registration, comments, reviews, forms, or REST API orders. ### What is the Suspects list for? The Suspects list gives you a review step before fully blocking a customer. Use it when an identity looks risky but should not be rejected immediately. ### Can Blacklist Manager stop checkout through PayPal, Stripe, or another payment gateway? Yes. Blacklist Manager checks customer details during the WooCommerce checkout and order creation flow before the payment gateway becomes the final decision point. Test custom checkout flows on staging. ### Can this plugin stop contact form spam? Yes. Blacklist Manager supports Contact Form 7, Gravity Forms, and WPForms submissions. ### Does Blacklist Manager slow down my site? Blacklist checks run only when needed, such as checkout, registration, comment submission, form submission, or API order creation. The checks are designed to stay lightweight. ### Are Premium features required? No. Core includes local blacklist management, checkout protection, Suspects and Blocklist workflows, registration/comment/review/form/REST protection, checkout email verification, notices, and dashboard statistics. Premium is appropriate when you need automated risk actions, payment or device intelligence, phone OTP, detailed activity history, multi-store tooling, or advanced integrations. ### What is the difference between Premium and Global Blacklist Decisions? Blacklist Manager Premium extends protection and administration inside your store. Global Blacklist Decisions is a separate optional connected service for broader- risk checks. You can evaluate either offering for its own use case; neither is a required step before the other, and Core’s local protection works without both. ### Does Global Blacklist Decisions share data? Global Blacklist Decisions is a connected fraud-prevention service. Data exchange depends on the Global Blacklist connection and checks you enable. Review the Global Blacklist settings, plan details, and privacy terms before using it in production. ## Reviews ![](https://secure.gravatar.com/avatar/a34f1a2187709e07bd46ffe46b1dd1a0ba8027c6e139d5f9acb1d0ab959a87d2? s=60&d=retro&r=g) ### 󠀁[Excellent plugin, great support.](https://wordpress.org/support/topic/excellent-plugin-great-support-156/)󠁿 [DidierMX](https://profiles.wordpress.org/plaga/) agosto 2, 2026 An excellent plugin, I've been using it for a while and it's worked for me to block some orders from problematic customers. Best of all, the support is excellent and extremely fast. ![](https://secure.gravatar.com/avatar/877b920a768fc00d2a80ef6e3b4932d0220ec1eaf77e1476fa8855c0e8d98b49? s=60&d=retro&r=g) ### 󠀁[Free version is extremely crippled](https://wordpress.org/support/topic/free-version-is-extremely-crippled/)󠁿 [trotsky](https://profiles.wordpress.org/trotsky/) marzo 27, 2026 1 reply Almost everything mentioned in the description is not available in the free version. You could call that a "bait and switch". At the very least, it is dishonest. ![](https://secure.gravatar.com/avatar/bed0303e15fbaf6ccf27290abc29160870a170e0eb5265e01a0c8c649c8574c7? s=60&d=retro&r=g) ### 󠀁[Only 2 settings for the free version of the plugin!](https://wordpress.org/support/topic/only-2-settings-for-the-free-version-of-the-plugin/)󠁿 [Maxcom](https://profiles.wordpress.org/maxcom/) marzo 14, 2026 1 reply The free version of this plugin is hilariously useless. As you go through the settings panel every setting in 7 of the 8 settings panels requires to be unlocked via the pro plugin version. There are only 2 settings in the general panel that can be used. One is Cancel the order / Prevent customers from checking out if they use the phone number or email address is on the blocklist. But you cant actually use the phone number or email blocking unless you upgrade! The only actual setting that works is via subscribing to their global blacklist. Such blacklists are useless (I explain why below). Going through the grayed out settings almost all are useless in any case. Bot farms attempting to test stolen credit card numbers use public domain email variations such as johndoe24f5@gmail/hotmail/yahoo and if you block a top level free mail provider your at risk of losing most of your potential customers. And bot farms have access to hundreds of thousands of ips worldwide so they will rotate the ips for every order attempt – we just dealt with one CC swarm which used over 75k American ips. Simple IP blocking is 5th grade amateur level defense that is easily defeated by an attack. The only settings in this plugin that would be useful are matching IP address to the order address, preventing multiple orders with the same email/phone and requiring a confirmation email or text. And none of those features are available in the free version of the plugin. Garbage in, garbage out. ![](https://secure.gravatar.com/avatar/d9a389691e44f05bca408caa81e444c58e920b54995fc6a7a4d13ab03f04596f? s=60&d=retro&r=g) ### 󠀁[Works Very Well](https://wordpress.org/support/topic/works-very-well-752/)󠁿 [tangentwpservices](https://profiles.wordpress.org/tangentwpservices/) setiembre 27, 2025 WooCommerce site was being flooded with Failed orders and CC fraud. Installed the plugin, configuration was fairly easy. And it stopped the CC failed orders. Will keep an eye on the situation, but for now, it works as advertised. Tech support and customer service is very good. ![](https://secure.gravatar.com/avatar/14e2f7a3e142e2bb28087ff8b19c493d69d1d693681752d4cf0efd967c245509? s=60&d=retro&r=g) ### 󠀁[Breaking all form functionality](https://wordpress.org/support/topic/breaking-all-form-functionality/)󠁿 [tuchubby](https://profiles.wordpress.org/tuchubby/) chulio 23, 2025 1 reply All of my forms and woocommerce checkout is getting a critical error when a user submits. The risk for lost customer trust is not worth installing. ![](https://secure.gravatar.com/avatar/b964b3a7162df5cc5b0f00c7e930e8bb533c5830aa84bfaf6f854874759bdd2e? s=60&d=retro&r=g) ### 󠀁[Works well](https://wordpress.org/support/topic/works-well-3063/)󠁿 [rick59](https://profiles.wordpress.org/rick59/) chunyo 5, 2025 Installed this plug-in to block the IP addresses of some malicious 'customers' who would order and deny receiving the goods to seek refunds. Even though we had proof of delivery. No more bad orders since using the plug-in [ Read all 13 reviews ](https://wordpress.org/support/plugin/wc-blacklist-manager/reviews/) ## Contributors & Developers “Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification” is open source software. The following people have contributed to this plugin. Contributors * [ YoOhw Studio ](https://profiles.wordpress.org/yoohw/) * [ B.Ng ](https://profiles.wordpress.org/baonguyen0310/) “Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification” has been translated into 1 locale. Thank you to [the translators](https://translate.wordpress.org/projects/wp-plugins/wc-blacklist-manager/contributors) for their contributions. [Translate “Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification” into your language.](https://translate.wordpress.org/projects/wp-plugins/wc-blacklist-manager) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/wc-blacklist-manager/), check out the [SVN repository](https://plugins.svn.wordpress.org/wc-blacklist-manager/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/wc-blacklist-manager/) by [RSS](https://plugins.trac.wordpress.org/log/wc-blacklist-manager/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 2.3.2 (Sep 23, 2026) * New: Adds configurable security and operational email notifications for blocked or suspicious activity and Global Blacklist usage. * Security: Strengthens blocked-user authentication, WooCommerce REST order protection, and comment and product-review blocking, including safer handling of existing review settings. * Fix: Restores Dashboard lists after upgrades, refreshes first-party asset cache versions, and clarifies database-readiness recovery guidance. * Fix: Defers notification translation setup to supported WordPress timing, preventing WordPress 6.7+ notices and related header warnings; improves notification branding and site-local dates. * Improve: Refines Dashboard navigation, checkout and settings presentation, and Global decision status and evidence while local protection remains available when the remote service is unavailable. * Compatibility: After Global notification state v2 has materialized, rollback requires matching prior Core/Premium code and a complete pre-upgrade database snapshot; code-only downgrade is unsupported. ## Meta * Version **2.3.2** * Last updated **1 semana ago** * Active installations **2.000+** * WordPress version ** 6.3 or higher ** * Tested up to **7.1.2** * PHP version ** 7.4 or higher ** * Languages * [English (US)](https://wordpress.org/plugins/wc-blacklist-manager/) y [Spanish (Spain)](https://es.wordpress.org/plugins/wc-blacklist-manager/). * [Translate into your language](https://translate.wordpress.org/projects/wp-plugins/wc-blacklist-manager) * Tags * [blacklist](https://arg.wordpress.org/plugins/tags/blacklist/)[checkout](https://arg.wordpress.org/plugins/tags/checkout/) [form spam](https://arg.wordpress.org/plugins/tags/form-spam/)[fraud prevention](https://arg.wordpress.org/plugins/tags/fraud-prevention/) [WooCommerce Anti-Fraud](https://arg.wordpress.org/plugins/tags/woocommerce-anti-fraud/) * [Advanced View](https://arg.wordpress.org/plugins/wc-blacklist-manager/advanced/) ## Ratings 3.8 out of 5 stars. * [ 9 5-star reviews ](https://wordpress.org/support/plugin/wc-blacklist-manager/reviews/?filter=5) * [ 0 4-star reviews ](https://wordpress.org/support/plugin/wc-blacklist-manager/reviews/?filter=4) * [ 0 3-star reviews ](https://wordpress.org/support/plugin/wc-blacklist-manager/reviews/?filter=3) * [ 0 2-star reviews ](https://wordpress.org/support/plugin/wc-blacklist-manager/reviews/?filter=2) * [ 4 1-star reviews ](https://wordpress.org/support/plugin/wc-blacklist-manager/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/wc-blacklist-manager/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/wc-blacklist-manager/reviews/) ## Contributors * [ YoOhw Studio ](https://profiles.wordpress.org/yoohw/) * [ B.Ng ](https://profiles.wordpress.org/baonguyen0310/) ## Support Issues resolved in last two months: 4 out of 6 [View support forum](https://wordpress.org/support/plugin/wc-blacklist-manager/)