COD Anti-Fraud for WooCommerce

COD Anti-Fraud for WooCommerce protects WooCommerce online stores from non-delivered or fraudulent Cash on Delivery (COD) orders by combining dynamic risk evaluation with mandatory WhatsApp OTP verification.

Key Features

• Dynamic Risk Engine: Calculates a 0-100 risk score based on guest checkout status, cart total, and past failed/cancelled COD history.
• WhatsApp OTP Verification Gateway: Automatically sends a 6-digit verification code to the customer’s phone via WhatsApp before confirming COD orders.
• Anti-Bypass Protection (Server-Side & Client-Side): Strict pre-checkout verification enforcement ensuring no unverified COD orders can be submitted.
• Optimized Checkout UI/UX: Dedicated #wc-cod-otp-wrapper container with smooth real-time states, responsive design, and compatibility with Classic and Blocks checkout.
• Smart Thresholds & Gateways: Configure minimum/maximum cart amounts for COD, blacklist fraudulent phone numbers or emails, and whitelist trusted VIP customers.
• Rate Limiting & Anti-Brute-Force: Built-in rate limiter by phone number and IP address to prevent SMS/WhatsApp flooding.
• Multiple Gateway Support: Native integration with UltraMsg, BeraLab Baileys Gateway, and extensible for Twilio / custom WhatsApp providers.
• Order Meta & Admin Details: Transparent risk scores and verification timestamps displayed directly inside WooCommerce order details.
• PHP 8.x & HPOS Certified: Fully compatible and tested with PHP 8.0-8.3 and WooCommerce High-Performance Order Storage (HPOS).

External services

This plugin connects to external WhatsApp API services (such as UltraMsg WhatsApp API or the BeraLab WhatsApp Gateway) to send One-Time Password (OTP) verification messages via WhatsApp to customers choosing the Cash on Delivery (COD) payment method.

• UltraMsg Provider: UltraMsg Inc. (https://ultramsg.com/)
  • Terms of Service: https://ultramsg.com/terms-conditions.php
  • Privacy Policy: https://ultramsg.com/privacy-policy.php
• BeraLab Gateway Provider: BeraLab Cloud Gateway (https://beralabs.it/whatsapp-gateway.html)
  • Terms & Privacy: https://beralabs.it/privacy-policy.html

What data is sent to the WhatsApp service?
* The customer’s mobile telephone number entered during checkout.
* The dynamically generated 6-digit OTP verification code text.

No customer passwords, credit card numbers, billing addresses, or purchase history details are shared with external messaging gateways. API requests are triggered exclusively when a customer requests an OTP code to verify a Cash on Delivery order.