COD Fraud Prevention

Stop fake COD orders
before they ship.

Complete control over Cash-on-Delivery in WooCommerce. Block fraudulent customers before they place orders, score risk automatically, and protect your revenue — with zero performance impact and no external APIs.

✓ Free v1.3.1 OTP Verification HPOS Compatible No External APIs GDPR Ready
Download from WP.org → Documentation
The Problem

COD fraud is draining your store

Fake orders, repeat offenders, and unverified phone numbers drive up your RTO rate, waste your logistics budget, and leave real orders sitting unfulfilled. In high-COD markets like India, the Middle East, and Southeast Asia, this is a daily revenue leak.

The Solution

Visual rules + OTP verification.

Build custom block and allow-only rules with a drag-and-drop interface. Add OTP phone verification so every COD customer proves their number before placing an order. Automatically blacklist repeat offenders. All in one plugin.

Smart COD Control & Fraud Blocker
Get the plugin
Free
On WordPress.org · Always free
Download from WP.org → View Documentation
Version1.3.1
WordPress5.8+ (6.9.4 tested)
WooCommerce5.0+ (10.6.1 tested)
PHP7.4+
OTP SMSTwilio, Vonage, Webhook
External APIsOTP only (your provider)
LicenseGPLv2+
  • Visual rule builder — no code needed
  • 11 condition types with AND/OR logic
  • OTP phone verification via SMS
  • Auto-blacklist & admin approval
  • Fraud heatmap & logs
  • Built-in test simulator
Visual Rule Builder

Build COD rules visually.
No code needed.

Create block and allow-only rule groups with a clean drag-and-drop builder. Each rule supports multiple conditions joined by AND or OR logic — with live connector badges that make your logic instantly readable. Pick from quick-start preset templates to get going in seconds.

  • Block COD when conditions match — or allow it only when they do
  • 11 condition types: cart value, country, state, postal code, schedule, user role, product, category, coupon, weight
  • AND / OR logic per rule — with visual connector badges
  • Quick-start preset templates for common fraud scenarios
  • Rules evaluated in order at checkout — first match wins
  • Test simulator validates every rule before it goes live
GIF / Screenshot
Visual COD Rule Builder
OTP Phone Verification

Verify every COD customer
before they order.

Send a 6-digit OTP to the customer's phone before a COD order is placed. Only verified numbers go through. Works with Twilio, Vonage, or any custom SMS webhook — with a live preview of the widget right in your admin settings.

  • Supports Twilio, Vonage, and custom webhooks
  • Configurable OTP expiry and max attempts
  • 60-second resend cooldown
  • Custom SMS message template
  • Works with Classic and Block checkout
  • Live widget preview in admin — see exactly what customers see
OTP phone verification widget
Blacklisting & Approvals

Block bad actors.
Review the rest.

Automatic and manual blacklisting work together. The system blocks repeat offenders on autopilot. You can instantly blacklist anyone by email or phone, and hold suspicious orders for manual review before they ship.

  • Auto-blacklist customers after configurable failed delivery threshold
  • Manual blacklist by email or phone — bulk management
  • Admin approval workflow — hold and review before shipping
  • Approve or reject directly from the WooCommerce dashboard
GIF / Screenshot
Blacklist or approval queue
Fraud Analytics

See where fraud
comes from.

Every blocked COD attempt is logged with customer data, block reason, and location. The visual heatmap shows you exactly which regions are generating the most fraud. The rebuilt test simulator evaluates your actual saved rules — so you know exactly what will happen before it does.

  • Full log of every blocked COD attempt
  • Customer email, phone, IP, cart total, timestamp, block reason
  • Geographic fraud heatmap visualization
  • Rebuilt test simulator — evaluates real saved rules per-condition
Screenshot
Fraud heatmap or logs
All features
11 condition types. OTP. Every angle covered.
🧱

Visual Rule Builder

Block and allow-only rule groups with drag-and-drop conditions

🔀

AND / OR Logic

Per-rule match mode with live connector badges

📋

Preset Templates

Quick-start rule templates for common fraud scenarios

📱

OTP Verification

Phone verification via Twilio, Vonage, or custom webhook

🌍

Geographic Controls

Block by country, state, or postal code

💰

Order Value Limits

Min/max COD cart values with custom messages

💵

COD Fee

Add handling fee to filter non-serious buyers

🕒

Time Scheduling

Block COD outside business hours or specific days

👥

User Role Rules

Block guests, restrict to verified roles only

📦

Product Controls

Disable COD for categories or specific products

🎟

Coupon Protection

Block COD when discount codes are applied

⚖️

Weight Rules

Min/max cart weight thresholds for COD

🚫

Auto-Blacklist

Automatic blocking after failed delivery threshold

🗃

Manual Blacklist

Block by email or phone, bulk management

Admin Approval

Hold and review orders before they ship

🗺

Fraud Heatmap

Geographic visualization of blocked attempts

🧪

Test Simulator

Evaluates actual saved rules — per rule, per condition

Who it's for
Built for high-COD markets.
If your store operates where cash-on-delivery is the dominant payment method, fake orders are an everyday reality.
🇮🇳

India

COD accounts for 60–70% of eCommerce transactions. Fake orders and high RTO rates are the #1 profitability challenge.

🌍

Middle East & SEA

High COD penetration across UAE, Saudi Arabia, Pakistan, Indonesia, and the Philippines — with significant fraud exposure.

🛑

Any High-RTO Store

If you're seeing failed deliveries, repeat fraudulent customers, or rising return-to-origin losses, this plugin is for you.

Real-world use cases
Rules that solve real problems.
📱
OTP phone gate

Require every COD customer to verify their phone number — stop fake numbers at the source.

💸
High-value order protection

Block COD for orders over ₹20,000 / $500 to limit financial exposure on large orders.

📍
Verified PIN code delivery

Allow COD only for verified postal codes in metro areas — block unserviceable or high-fraud zones.

💴
COD handling fee filter

Add a ₹50 / $1 fee to separate serious buyers from impulsive or fraudulent placements.

🔁
Repeat offender blocking

Auto-block customers with 3+ failed deliveries — no manual work required.

🌙
Late-night fraud prevention

Disable COD between 10 PM – 8 AM when impulsive and fake order spikes occur.

🎁
Coupon abuse prevention

Disable COD whenever a discount coupon is applied to stop stacked fraud attempts.

🔍
First-time buyer approval

Require manual admin review for all first-time COD orders before they're confirmed.

Technical details
Requirements & compatibility
RequirementDetails
WordPress5.8+ (Tested to 6.9.4)
WooCommerce5.0+ (Tested to 10.6.1)
PHP7.4+
HPOSFully compatible
Block CheckoutCompatible (OTP included)
MultisiteCompatible
OTP ProvidersTwilio, Vonage, Custom Webhook
External APIsOTP SMS only — via your provider
Database1 custom table (wp_wcsf_fraud_logs)
PrivacyGDPR/CCPA compliant · Full data removal on uninstall
TranslationReady (.pot file included)
LicenseGPLv2 or later
FAQ
Common questions
Go to WooCommerce → Smart COD Control → COD Rules. Click Add New Rule, choose whether to block or allow-only, pick AND or OR match mode, add conditions, and save. Rules are evaluated in order at checkout — first match wins.
Twilio and Vonage are supported out of the box. Any SMS gateway with a webhook URL is also supported via the custom webhook option. You supply the API credentials — no data goes to The Plugin Forge.
Yes. OTP verification works with both Classic and WooCommerce Block checkout.
No. Only the COD payment method is affected. Cards, UPI, wallets, and all other gateways remain completely untouched.
Yes. The built-in test simulator evaluates your actual saved rules against any scenario — showing per-rule and per-condition results — before anything goes live.
No. The plugin only runs at checkout. There is zero impact on product pages, the homepage, or any other part of your site.
All plugin data — settings, rules, fraud logs, and database tables — are permanently removed on uninstall via uninstall.php. Nothing is left behind.
Changelog
What's new
v1.3.1
March 2026
Patch
  • Fix: First rule now appears immediately after saving without requiring a page refresh
v1.3.0
March 2026
Major
  • New: Visual COD Rule Builder with block and allow-only rule groups
  • New: 11 condition types — cart, location, schedule, role, product, category, coupon, weight
  • New: AND / OR logic with live connector badges between conditions
  • New: Quick-start preset templates and empty-state preset cards
  • New: Rule test simulator rebuilt — evaluates actual saved rules per-condition
  • New: OTP verification widget live preview in admin settings
  • Fix: Blocked message text and colors now correctly applied at checkout
v1.2.0
March 2026
Feature
  • New: OTP phone verification — Twilio, Vonage, and custom webhook
  • New: Configurable OTP expiry, max attempts, and message template
  • New: 60-second resend cooldown
v1.1.0
December 2025
Major
  • Schedule Control — restrict COD by day and time window
  • User Role Restrictions, Product & Category blocking, Coupon restrictions, Weight rules
  • Intelligent Risk Scoring and Admin Approval Workflow
  • Auto-Blacklist system, Test Simulator, Fraud Heatmap analytics
v1.0.0
January 2025
Initial
  • Location-based COD control (country, state, postal code)
  • Cart value limits, COD handling fee, manual blacklist, fraud logging

Stop losing money to fake COD orders.

Free to download. Install in 5 minutes and start blocking fraud immediately.