About this plugin
Every fake Cash on Delivery order costs you a courier fee, packing time and stock that sits on the road. MatrixInn COD Checkout Rules for WooCommerce checks each order at checkout and stops, flags or refuses Cash on Delivery for orders that look wrong, using rules that run entirely on your own site.
What it checks
- Blocklist: phone numbers, emails, IP addresses, postcodes and address text. Unlimited entries. Phone numbers match however they are typed (0300-1234567, +92 300 1234567 and 923001234567 are the same number), and emails match without dots or “+tags” for Gmail.
- Refused before: when you set an order to the new Refused (COD) status (or another status you choose), the customer’s phone and email go on a list, and their next Cash on Delivery order is flagged.
- Mobile number check: the billing phone must be a real mobile number for Pakistan, India, Bangladesh, UAE, Saudi Arabia, Qatar, Kuwait, Bahrain or Oman. Made-up numbers such as 0300-0000000 or 0300-1234567 are caught too.
- Too many orders: the same phone, email or IP placing more Cash on Delivery orders than you allow in a time window.
- Returning customers only (off by default): Cash on Delivery only after a number of completed orders; new customers pay online first.
- Cities and postcodes: places with, or without, Cash on Delivery.
- Order total: Cash on Delivery only between a minimum and a maximum.
What happens when a rule matches
You choose per rule:
- Flag: the order goes through with a note, and waits “on hold” so you can call the customer before shipping.
- Refuse Cash on Delivery: the customer can still pay with another method.
- Block: the order cannot be placed.
The whitelist always wins: a trusted customer is never stopped. Test mode writes to the log what would have happened without stopping anything, so you can try rules safely.
On every order
The COD Checkout Rules box on the order screen shows why an order was flagged and has buttons to block the phone, email or IP, or to trust the customer.
Built to be safe
- Works with the classic checkout and the Checkout block, and with WooCommerce’s High-Performance Order Storage (HPOS).
- If anything inside the plugin fails, the order goes through and the error is logged. It never breaks your checkout.
- Nothing is sent to other servers. No SMS service, no API key, no tracking, no ads.
- Order history keeps only a keyed hash of phone, email and IP. The plugin adds its own text to Settings > Privacy, and works with Tools > Export / Erase Personal Data.
Built by MatrixInn Solutions. The MatrixInn name and logo on the plugin screen are trademarks of MatrixInn Solutions. Nothing is shown on the public side of your site except the messages you set for blocked orders.