Title: Noventum Fake Order Protection
Author: noventum
Published: <strong>18. August 2026</strong>
Last modified: 15. September 2026

---

Plugins suchen

![](https://ps.w.org/noventum-fake-order-protection/assets/banner-772x250.jpg?rev
=3666976)

![](https://ps.w.org/noventum-fake-order-protection/assets/icon-256x256.gif?rev=
3666985)

# Noventum Fake Order Protection

 Von [noventum](https://profiles.wordpress.org/noventum/)

[Herunterladen](https://downloads.wordpress.org/plugin/noventum-fake-order-protection.1.2.0.zip)

 * [Details](https://de.wordpress.org/plugins/noventum-fake-order-protection/#description)
 * [Rezensionen](https://de.wordpress.org/plugins/noventum-fake-order-protection/#reviews)
 *  [Installation](https://de.wordpress.org/plugins/noventum-fake-order-protection/#installation)
 * [Entwicklung](https://de.wordpress.org/plugins/noventum-fake-order-protection/#developers)

 [Support](https://wordpress.org/support/plugin/noventum-fake-order-protection/)

## Beschreibung

Noventum Fake Order Protection helps WooCommerce stores reduce fake checkout activity,
repeated failed payment attempts, and automated order abuse.

The plugin monitors checkout traffic across both WooCommerce Store API requests 
and the classic WooCommerce AJAX checkout flow. This helps protect stores using 
Checkout Blocks, traditional checkout templates, and payment gateways that rely 
on different checkout request methods.

Protection is built from several lightweight layers:

 * Rate limiting for repeated checkout and cart requests.
 * A hidden honeypot field for simple bot detection.
 * Checks for suspicious user agents.
 * Origin and referer validation for checkout requests.
 * Failed payment retry tracking.
 * Repeated order amount pattern detection.
 * Temporary IP blocking for abusive activity.
 * Optional Google reCAPTCHA v3 verification for higher-risk attempts.

When suspicious activity is detected, the plugin can rate-limit the request, require
reCAPTCHA verification when enabled, or temporarily block abusive IP activity. Normal
checkout traffic can continue without adding friction for every customer.

Administrators can configure the protection mode, reCAPTCHA keys, block duration,
trusted API bypass settings, and logging options from the plugin settings page. 
The plugin also includes basic logs and a blocked IP list so store owners can review
protection activity and manually remove blocked IPs when needed.

This plugin does not create fake orders. It is designed to help reduce fake or abusive
order attempts in WooCommerce stores.

If you find this plugin useful, you can support ongoing development with a [voluntary donation](https://www.paypal.biz/noventum).

For stores that need help with setup, troubleshooting, or custom WooCommerce protection
rules, Noventum can provide optional support and customization services.

### Third-Party Services

This plugin can use Google reCAPTCHA v3 when reCAPTCHA is enabled and site keys 
are configured in the plugin settings.

When enabled, the plugin loads Google’s reCAPTCHA JavaScript from [https://www.google.com/recaptcha/](https://www.google.com/recaptcha/)
on WooCommerce cart, checkout, and product pages. During protected checkout attempts,
the plugin sends the reCAPTCHA token, the configured secret key, and the visitor
IP address to Google’s verification endpoint at [https://www.google.com/recaptcha/api/siteverify](https://www.google.com/recaptcha/api/siteverify).

Google reCAPTCHA is provided by Google. Review Google’s terms and privacy information
before enabling this option:

 * [Google Privacy Policy](https://policies.google.com/privacy)
 * [Google Terms](https://policies.google.com/terms)
 * [reCAPTCHA information](https://www.google.com/recaptcha/about/)

### Privacy

The plugin processes technical request data such as IP address, user agent, checkout
source headers, WooCommerce session state, checkout email data, order status, payment
method, and order total to detect abusive checkout behavior.

By default, plugin log entries anonymize personal data before writing to disk, and
blocked attempt emails are shown in masked form. The plugin stores temporary risk
counters in WordPress transients and stores temporary blocked IP and blocked checkout
attempt records in custom database tables.

Administrators can view blocked IP rows and plugin logs from the plugin settings
page. Log files are stored under the WordPress uploads directory in `noventum-oap/`
and rotated automatically.

If Google reCAPTCHA is enabled, checkout verification data is sent to Google as 
described in the Third-Party Services section.

## Installation

 1. Upload the plugin folder to `/wp-content/plugins/`.
 2. Activate the plugin from the Plugins screen in WordPress.
 3. Make sure WooCommerce is installed and active.
 4. Configure the plugin under Settings > Fake Order Protection.
 5. Add Google reCAPTCHA v3 keys if you want reCAPTCHA verification.

## FAQ

### Does this plugin require WooCommerce?

Yes. The plugin only runs its protection features when WooCommerce is active.

### Does this plugin require Google reCAPTCHA?

No. reCAPTCHA is optional, but recommended for stronger protection.

### Does the plugin block real customers?

The plugin uses rate limits, session checks, and risk scoring. Start with Balanced
mode and review logs after enabling protection.

## Rezensionen

Zu diesem Plugin liegen noch keine Rezensionen vor.

## Mitwirkende und Entwickler

„Noventum Fake Order Protection“ ist Open-Source-Software. Folgende Menschen haben
an diesem Plugin mitgewirkt:

Mitwirkende

 *   [ noventum ](https://profiles.wordpress.org/noventum/)

[Übersetze „Noventum Fake Order Protection“ in deine Sprache.](https://translate.wordpress.org/projects/wp-plugins/noventum-fake-order-protection)

### Interessiert an der Entwicklung?

[Durchstöbere den Code](https://plugins.trac.wordpress.org/browser/noventum-fake-order-protection/),
sieh dir das [SVN-Repository](https://plugins.svn.wordpress.org/noventum-fake-order-protection/)
an oder abonniere das [Entwicklungsprotokoll](https://plugins.trac.wordpress.org/log/noventum-fake-order-protection/)
per [RSS](https://plugins.trac.wordpress.org/log/noventum-fake-order-protection/?limit=100&mode=stop_on_copy&format=rss).

## Änderungsprotokoll

#### 1.2.0

 * Added AJAX search and pagination for logs and blocked attempts in the admin screen.
 * Added site timezone display for log timestamps.
 * Added confirmation prompts for clearing logs, clearing blocked attempts, deleting
   blocked IP rows, and manually blocking IPs.
 * Improved failed payment pattern detection so similar repeat attempts are challenged
   with reCAPTCHA earlier.
 * Added clearer help text for protection modes.

#### 1.1.0

 * Added a blocked checkout attempts list in the plugin settings.
 * Added manual IP blocking and log clearing tools.
 * Improved blocked IP reason labels in the admin screen.

#### 1.0.0

 * Initial WordPress.org-ready release metadata and privacy documentation.

## Meta

 *  Version **1.2.0**
 *  Zuletzt aktualisiert **vor 4 Wochen**
 *  Aktive Installationen **weniger als 10**
 *  WordPress-Version ** 6.3 oder höher **
 *  Getestet bis **7.1.3**
 *  PHP-Version ** 8.0 oder höher **
 *  Sprache
 * [English (US)](https://wordpress.org/plugins/noventum-fake-order-protection/)
 * Schlagwörter
 * [checkout](https://de.wordpress.org/plugins/tags/checkout/)[fraud prevention](https://de.wordpress.org/plugins/tags/fraud-prevention/)
   [recaptcha](https://de.wordpress.org/plugins/tags/recaptcha/)[security](https://de.wordpress.org/plugins/tags/security/)
   [woocommerce](https://de.wordpress.org/plugins/tags/woocommerce/)
 *  [Erweiterte Ansicht](https://de.wordpress.org/plugins/noventum-fake-order-protection/advanced/)

## Bewertungen

Es wurden noch keine Rezensionen eingereicht.

[Deine Rezension](https://wordpress.org/support/plugin/noventum-fake-order-protection/reviews/#new-post)

[Alle Rezensionen anzeigen](https://wordpress.org/support/plugin/noventum-fake-order-protection/reviews/)

## Mitwirkende

 *   [ noventum ](https://profiles.wordpress.org/noventum/)

## Support

Möchtest du etwas mitteilen? Brauchst du Unterstützung?

 [Support-Forum anzeigen](https://wordpress.org/support/plugin/noventum-fake-order-protection/)

## Spenden

Möchtest du die Weiterentwicklung dieses Plugins unterstützen?

 [ Für dieses Plugin spenden ](https://www.paypal.biz/noventum)