About this plugin
COD Anti-Fraud for WooCommerce protects WooCommerce online stores from non-delivered or fraudulent Cash on Delivery (COD) orders by combining dynamic risk evaluation with mandatory WhatsApp OTP verification.
Key Features
- Dynamic Risk Engine: Calculates a 0-100 risk score based on guest checkout status, cart total, and past failed/cancelled COD history.
- WhatsApp OTP Verification Gateway: Automatically sends a 6-digit verification code to the customer’s phone via WhatsApp before confirming COD orders.
- Anti-Bypass Protection (Server-Side & Client-Side): Strict pre-checkout verification enforcement ensuring no unverified COD orders can be submitted.
- Optimized Checkout UI/UX: Dedicated #wc-cod-otp-wrapper container with smooth real-time states, responsive design, and compatibility with Classic and Blocks checkout.
- Smart Thresholds & Gateways: Configure minimum/maximum cart amounts for COD, blacklist fraudulent phone numbers or emails, and whitelist trusted VIP customers.
- Rate Limiting & Anti-Brute-Force: Built-in rate limiter by phone number and IP address to prevent SMS/WhatsApp flooding.
- Multiple Gateway Support: Native integration with UltraMsg, BeraLab Baileys Gateway, and extensible for Twilio / custom WhatsApp providers.
- Order Meta & Admin Details: Transparent risk scores and verification timestamps displayed directly inside WooCommerce order details.
- PHP 8.x & HPOS Certified: Fully compatible and tested with PHP 8.0-8.3 and WooCommerce High-Performance Order Storage (HPOS).
External Services
This plugin connects to external WhatsApp API services (such as UltraMsg WhatsApp API or the BeraLab WhatsApp Gateway ) to send One-Time Password (OTP) verification messages via WhatsApp to customers choosing the Cash on Delivery (COD) payment method.
- UltraMsg Provider: UltraMsg Inc. – https://ultramsg.com/
- Terms of Service: https://ultramsg.com/terms-conditions.php
- Privacy Policy: https://ultramsg.com/privacy-policy.php
- BeraLab Gateway Provider: BeraLab Cloud Gateway – https://beralabs.it/whatsapp-gateway.html
- Terms & Privacy Policy: https://beralabs.it/privacy-policy.html
What data is sent to the WhatsApp service?
* The customer’s mobile telephone number entered during checkout.
* The dynamically generated 6-digit OTP verification code text.
No customer passwords, credit card numbers, billing addresses, or purchase history details are shared with external messaging gateways. API requests are triggered exclusively when a customer requests an OTP code to verify a Cash on Delivery order.