Anti-fraud, checkout verification and spam prevention plugin for WooCommerce and WordPress forms.
As of April 2026, Blacklist Manager is a WordPress spam prevention plugin with 2.0K+ active installations and a 3.7/5 rating from 12 reviews. It has been downloaded 53K+ times in total. Requires WordPress 6.3+ and PHP 7.4+. Available on WordPress.org since 2024. Actively maintained — updated within the last month. Downloads are down 36% this week. Support resolution rate: 100%. Top alternative: Hostbox Google reCAPTCHA.
Blacklist Manager is a powerful anti-fraud and spam-prevention plugin for WooCommerce and WordPress forms. WooCommerce Anti-Fraud & Checkout Verification & Spam Prevention blocks fraudulent orders, fake registrations, and spam form submissions by banning IPs, email addresses, and phone numbers at checkout or on contact forms. With real-time blacklist checks, you can stop chargebacks, unwanted sign-ups, and abusive bots before they hit your store.
Easily blacklist phone numbers, email addresses, IP addresses, and email domains to block unwanted users from placing orders, submitting forms, canceling transactions, or registering accounts. Whether you’re running an online store or collecting leads through forms, Blacklist Manager adds a critical layer of defense to your site.
Or…
Almost everything mentioned in the description is not available in the free version. You could call that a “bait and switch”. At the very least, it is dishonest.
The free version of this plugin is hilariously useless. As you go through the settings panel every setting in 7 of the 8 settings panels requires to be unlocked via the pro plugin version.
There are only 2 settings in the general panel that can be used. One is Cancel the order / Prevent customers from checking out if they use the phone number or email address is on the blocklist. But you cant actually use the phone number or email blocking unless you upgrade!
The only actual setting that works is via subscribing to their global blacklist. Such blacklists are useless (I explain why below).
Going through the grayed out settings almost all are useless in any case. Bot farms attempting to test stolen credit card numbers use public domain email variations such as johndoe24f5@gmail/hotmail/yahoo and if you block a top level free mail provider your at risk of losing most of your potential customers. And bot farms have access to hundreds of thousands of ips worldwide so they will rotate the ips for every order attempt – we just dealt with one CC swarm which used over 75k American ips. Simple IP blocking is 5th grade amateur level defense that is easily defeated by an attack.
The only settings in this plugin that would be useful are matching IP address to the order address, preventing multiple orders with the same email/phone and requiring a confirmation email or text. And none of those features are available in the free version of the plugin.
Garbage in, garbage out.
WooCommerce site was being flooded with Failed orders and CC fraud. Installed the plugin, configuration was fairly easy. And it stopped the CC failed orders. Will keep an eye on the situation, but for now, it works as advertised. Tech support and customer service is very good.
All of my forms and woocommerce checkout is getting a critical error when a user submits. The risk for lost customer trust is not worth installing.
Installed this plug-in to block the IP addresses of some malicious ‘customers’ who would order and deny receiving the goods to seek refunds. Even though we had proof of delivery. No more bad orders since using the plug-in
| WordPress | 6.3+ requiredTested up to 6.9.4 |
| PHP | 7.4+ required |
…and 1 more changes
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.