WooCommerce
Predax Fraud Guard
Score every WooCommerce checkout for fraud risk and automatically tag, hold, or block suspicious orders — all powered by the Predax API.
Install from WordPress.orgFree in the official WordPress Plugin Directory — install and auto-update straight from WP Admin → Plugins → Add New (requires WooCommerce).
What's new in v1.7
- Checkouts can never hang on us — a circuit breaker fails open instantly if the API is ever slow or unreachable, and the request timeout dropped from 8s to 3.5s. Fraud screening never costs you a sale.
- Live API usage meter — the settings page shows your real monthly IP-check usage against your plan's quota, and warns you before (and when) the limit is reached instead of pausing silently.
- IP allow & deny lists — trust or block single IPs and CIDR ranges (IPv4 + IPv6), with a chargeback feedback option that auto-adds offending IPs to your deny list.
- Privacy-safer Events Log — customer emails are stored masked (
bi***@example.com) with configurable retention, plus 7-day stats and CSV export.
Inside your WordPress admin
Real screenshots from the plugin — the Fraud Rules settings, and a screened order with its risk score, flags, and tags.
Features
One-click OAuth connect
Click "Connect with Predax" in the setup wizard and the plugin links your store instantly via OAuth2 with PKCE — no API key to copy or paste.
Guided setup wizard
A first-activation wizard walks you through connection, protection preset (Recommended / Strict / Monitor Only), and a test transaction — ready in under two minutes.
Events Log admin page
Predax → Events Log shows two tabs: blocked checkout attempts and flagged/held orders, each with IP, risk score, flags, reason, and direct order links for quick review.
Risk column on Orders list
A colour-coded Predax risk badge and top threat flag appear directly on WooCommerce → Orders. Works with both classic and HPOS order storage.
Real-time checkout risk scoring
Every checkout is scored by the Predax API before the order is placed. Risk score, threat flags, and geolocation are attached as order notes and metadata.
Order velocity detection
Flag or block customers who place multiple orders in quick succession using the same email address or IP. Configurable time window and order limit.
Automatic order hold
Automatically move flagged orders to On Hold status for manual review instead of processing them. Separate risk threshold from the block threshold.
Billing country vs IP mismatch
Detect when the billing address country doesn't match the customer's IP country — a strong fraud signal. Set to Flag (tag order) or Block (reject checkout).
Disposable email blocking
Reject or flag checkouts using known throwaway email providers (mailinator, yopmail, trashmail, and ~50 others) without any external API call.
Refund & chargeback feedback loop
When a tagged order is refunded or cancelled, automatically send a feedback event to Predax to improve detection. Optionally blacklist the IP from all future orders.
VPN, proxy & datacenter detection
Per-signal Off / Monitor / Block radio controls for VPN, proxy, Tor, and datacenter IPs — the most common sources of payment fraud and chargebacks.
Configurable enforcement modes
Choose Tag Only (log + tag for review), Block High Risk, or Block Critical. Block High Risk is recommended for most stores — stops fraud automatically without manual review.
Country & region restrictions
Block or flag checkouts from specific countries or world regions. Useful for stores that only ship domestically or have high fraud from certain geographies.
How is this different from other anti-fraud plugins?
Most anti-fraud plugins score orders using rules about the order itself. Predax adds the signal those rules can't see: who is actually connecting at checkout.
Rule-based fraud plugins
Order-data heuristics
- Score mismatched names, order sizes, email patterns
- Rely on static rules you tune by hand
- Blind to the connection behind the order
Predax Fraud Guard
Live IP intelligence
- Knows if the customer is behind a VPN, proxy, Tor, or datacenter IP right now
- Backed by a continuously updated commercial threat database
- Blocks card testing and stolen-card fraud before payment is taken
Works alongside what you already run: pair it with rule-based fraud plugins, payment-processor screening like Stripe Radar, and security plugins like Wordfence (which protect your site, not your checkout). Each catches what the others can't.
Installation
- 1In your WordPress admin, go to Plugins → Add New and search for "Predax Fraud Guard"
- 2Click Install Now on Predax Fraud Guard for WooCommerce, then Activate (requires WooCommerce to be installed)
- 3Open the Predax setup wizard on first activation, or go to WooCommerce → Settings → Predax
- 4Click "Connect with Predax" for one-click OAuth, or paste your API key and click Test Connection
- 5Choose enforcement mode — Block High Risk is recommended for most stores. Enable VPN/Proxy blocking to catch the most common fraud vectors.
Recommended settings
Mode: Block High Risk — automatically rejects fraudulent orders before they waste your time
Tag threshold: 40 (flag medium+ risk orders for manual review)
Block threshold: 70 (only active when you switch to Block mode)
VPN / Proxy: Set to Monitor first to understand your traffic, then switch to Block once you've reviewed
Timezone mismatch: Enable — it adds a meaningful fraud signal at zero extra cost
Blocking is opt-in because false positives can lose revenue. Tag-only gives you full visibility first with no customer impact.
Order notes & tagging
For any order that meets your tag threshold, Predax adds a private order note and WooCommerce order tags automatically:
Order tags applied
- → Predax (all flagged orders)
- → Predax: High Risk (score-based)
- → Predax: VPN / Proxy / Tor / Datacenter
- → Predax: TZ Mismatch (when detected)
Order metadata stored
- → _predax_risk_score
- → _predax_risk_level
- → _predax_ip, _predax_country_code
- → _predax_is_vpn / _proxy / _tor / etc.
Where to find settings
All settings live inside the WooCommerce settings panel — no separate menu cluttering your sidebar.
WooCommerce → Settings → Predax
API key, enforcement mode, risk thresholds, VPN/Proxy/Tor/Datacenter Off·Monitor·Block radio groups, timezone mismatch, custom scoring weights, and country restrictions.
Risk scores and threat details appear as order notes on each qualifying order. Open any WooCommerce order and look in the notes panel on the right.
Ready to protect your WooCommerce store?
Get your free API key and start scoring orders in under 5 minutes.