Basiru Checkout Fraud Guard for WooCommerce

Basiru Checkout Fraud Guard protects your WooCommerce checkout from automated bot attacks, carding attempts, and fraudulent order submissions. It uses behavioral analysis, rate limiting, and learned reputation signals to block malicious traffic while allowing legitimate customers through.

Key Features

• Behavioral Detection – Identifies bots through missing browser headers, suspicious order totals, and known bot patterns
• Rate Limiting – Sliding window rate limiting with configurable thresholds
• Identity Rotation Detection – Detects when bots cycle through multiple identities from the same IP
• Name Rotation Detection – Flags IPs submitting orders with many different names
• IP Reputation – Automatic temporary and permanent bans for repeat offenders
• JS Proof Token – Browser verification system that blocks headless bot scripts
• Manual Blocklist – Add IPs and CIDR ranges to block specific sources
• Whitelist – Exempt trusted IPs and email domains from checks
• Learned Reputation – Builds internal database of blocked signals for future detection
• Full Audit Trail – Review recent blocks with customer details and block reasons
• Email Alerts – Configurable notifications when bots are blocked
• WooCommerce Logging – Integrates with WooCommerce log system

Detection Methods

• Known fake email domains (mailinator, guerrillamail, etc.)
• Known bot phone numbers
• Landmark/test addresses (1600 Pennsylvania Ave, etc.)
• Common bot order totals used in carding tests
• Missing HTTP headers (Origin, Accept-Language)
• Rapid checkout attempts
• Identity cycling patterns

Requirements

• WordPress 5.8 or higher
• WooCommerce 6.0 or higher
• PHP 7.4 or higher