A WooCommerce block list plugin is a tool that stops orders from specific people you have already identified, by matching an incoming order’s billing details against a list you control. It works on certainty rather than guesswork: if the order matches an entry on your list, it’s blocked, and if it doesn’t, the order goes through untouched.
That single idea separates a block list from every other fraud tool on the market. Most store owners reach for risk-scoring software the moment a bad order shows up, then spend weeks tuning rules and apologizing to real customers who got caught in the net.
The problem usually isn’t a mystery, though. It’s a handful of people you already know by name. In this article, we’ll cover how a WooCommerce block list plugin works, what data it matches on, how to set one up with Checkout Guard, and when it beats an algorithm. Let’s break it down.
What Is A WooCommerce Block List Plugin?
A WooCommerce block list plugin stops orders from named people you’ve flagged, by comparing each order’s billing details to a list you build by hand. It’s deterministic, not predictive: an exact match is blocked, everyone else checks out normally. There’s no risk score, no confidence threshold, and no model deciding who looks suspicious today.
The list is yours. You add each entry yourself, which means you always know why an order was stopped and who stopped it.
What we’ve seen: the stores that get the most value from a block list are the ones with a clear “never again” list. A few repeat charge-back artists, a serial coupon abuser, an ex-customer who keeps placing fake orders out of spite. Naming those people once and blocking them for good is far less work than chasing them order by order.
How A WooCommerce Block List Plugin Works
A WooCommerce block list plugin checks every incoming order against entries you’ve added by hand, then blocks any order that matches. The flow is short enough to describe in four steps, and nothing about it involves scoring or probability.
You build the list. Add the people you never want to sell to again, usually a name, an email, or both.
A shopper reaches checkout. The plugin reads the billing details they entered.
The plugin compares. Those details are matched against every entry on your list, ignoring capitalization.
It blocks or it doesn’t. A match stops the order and shows your denial message. No match, and the shopper checks out with zero friction.
This model is predictable, which is exactly why it works. You always know why an order was blocked, because you put that person on the list yourself.
Compare that to a scoring tool, where a legitimate buyer can get flagged for traveling abroad or shipping a gift to a new address, and you’re left guessing which rule misfired. Pulling the billing details for your list is easy too, since they’re already sitting in your order records, as our guide to exporting WooCommerce orders shows.
What Data A Block List Matches On
A block list matches on identifying details taken from the order’s billing information, most commonly the billing name and the email address. The exact fields depend on the plugin, but the goal is always the same: recognize a specific person you’ve flagged before, and leave everyone else alone.
Each identifier carries a trade-off, so it’s worth knowing what you’re relying on:
Billing name: the most human identifier, and the easiest one for a determined offender to change.
Email address: slightly stickier, since people reuse the same address across orders out of habit.
IP address: matched by some block-list tools, though addresses shift on mobile networks and get shared across households and offices.
Where a block list stops being the right tool
Bots are a different problem, and it’s worth knowing where the line sits. A block list stops human offenders you’ve identified, not automated bots cycling through random details.
That volume is real. According to Imperva threat research , retail sites faced an average of 569,884 AI-driven attacks a day between April and September 2024. Stopping that is the job of reCAPTCHA, spam filters, and rate limiting, not a manual list.
Checkout Guard: A WooCommerce Block List Plugin For Your Store
Checkout Guard is a WooCommerce block list plugin built on exactly this model. You add an entry with a billing first and last name, an email address, or both, and any order whose billing details match that entry is blocked at checkout. It runs on the classic checkout and on the newer Block checkout, so the rule holds no matter how your store is built.
What happens when someone on your list tries to order
The block is immediate and complete. Their cart is emptied, their session is expired, and they see a denial message you write yourself instead of an order confirmation.
On the classic checkout the block fires during validation, so no order is ever created. On the Block checkout, where the order record is created a moment earlier in the flow, Checkout Guard removes it. Either way you’re not left cleaning up junk orders by hand.
How to set up your block list
Setup takes a couple of minutes, and there’s only one setting to decide on before you start adding people.
Go to WooCommerce > Checkout Guard > Settings and write your Checkout Denial Message . This is the text a blocked shopper sees, so keep it short and neutral, and point them at support if you want a way back.
Open the Blocked Entries tab and choose Add Entry .
Fill in the First Name and Last Name , the Email Address , or both. Name matching needs the first and last name together, so an email is the safer catch if you only have one detail.
Save the entry. It takes effect on the next order attempt, with no cache clearing or re-save needed.
💡 Practical tip: add a note to each entry explaining why that person is on the list. Six months from now, “three charge-backs, March” is the difference between a confident decision and a guess.
Managing the list as it grows
Every entry lives in one table you can scan at a glance, showing the name, email, notes, and who added it. You can edit or delete any entry, so letting someone back in is a single click.
That “created by” column matters more than it sounds on a store with more than one admin. When a customer calls to ask why their order failed, you know who to ask before you answer.
Block List Or Risk Scoring: Which One Do You Need?
Choose a block list when your problem is known people, and choose a risk-scoring tool when your problem is unknown fraud at scale. That one distinction settles most of these decisions, because the two tools are answering different questions.
Question Block list Risk scoring What it stops Specific people you’ve named Orders that look statistically risky How it decides Exact match against your list Signals like geolocation, proxy use, email reputation, order velocity Who maintains it You, one entry at a time The vendor’s model, plus your rule tuning Main trade-off Only catches people already on the list Can block a real customer who looked risky Best fit Repeat offenders you can name High-volume card testing from strangers
Risk scoring is genuinely useful when strangers you can’t predict are hammering your store. Catching the unknown is something a manual list simply cannot do.
The cost of that power is false positives, and for a small or mid-sized store whose actual pain is a few repeat offenders, that’s a steady source of friction for no gain. The FTC reported that 38% of people who filed a fraud report in 2024 actually lost money, up sharply from 27% the year before, which says fraud is landing harder rather than just appearing more often. When the people hurting you are identifiable, a deterministic list beats an algorithm every time.
Many growing stores end up running both: a scoring tool for the unknown, and a block list for the known. If you already have a short list of names and emails you never want to see again, adding them to Checkout Guard takes a couple of minutes and stops them at the door from then on.
Frequently Asked Questions
What is a WooCommerce block list plugin?
A WooCommerce block list plugin stops orders from specific people you’ve already identified, by matching their billing details against a list you maintain. It’s deterministic rather than predictive: an exact match gets blocked, and everyone else checks out as normal. Unlike risk-scoring software, it never guesses, so it won’t flag a legitimate buyer who simply looks unusual on a given order.
How do I block a customer in WooCommerce?
You block a customer in WooCommerce by adding their billing name or email to a block list plugin, which then stops any matching order at checkout. With Checkout Guard, you go to WooCommerce > Checkout Guard > Blocked Entries , add the entry, and save. WooCommerce has no built-in customer blocking, so this needs a plugin.
What data does a block list use?
Block lists match on identifying details from an order’s billing information, most often the billing name and email address, and some tools also match on the shopper’s IP address. Checkout Guard matches on the billing name and email you flag, compared without regard to capitalization, so blocking stays precise and you control exactly who gets stopped.
Block list or fraud scoring, which is right for me?
A block list is right when your problem is known repeat offenders you can name. Fraud scoring is right when you’re hit by large-scale fraud from strangers you can’t identify in advance. Scoring catches the unknown but risks false positives, and a block list is precise but only stops people you’ve already added. Many growing stores run both for full coverage.
Does a block list stop bots?
No, and it’s honest to say so. A block list stops human offenders you’ve identified by name or email, not automated bots cycling through random details. Stopping bots is the job of tools like reCAPTCHA, spam filters, and rate limiting. If bots are your problem, pair a block list with one of those, and use the block list for the specific people you’ve decided to keep out.
Does blocking a customer work on the WooCommerce Block checkout?
Yes, Checkout Guard blocks matching orders on both the classic checkout and the newer WooCommerce Cart and Checkout Blocks . On the classic checkout the order is never created, and on the Block checkout the order record is removed. The shopper sees your denial message in both cases.
Pick The Tool That Matches Your Actual Problem
A WooCommerce block list plugin isn’t trying to be clever. It does one thing with total reliability: it stops the specific people you’ve already identified, and leaves everyone else alone. For most small and mid-sized stores, that’s the fraud problem that actually keeps coming back. Here’s what we covered:
If you’re ready to stop the people you can already name, a WooCommerce block list plugin is the fastest fix. Get Checkout Guard and block them cleanly, for good.