About this plugin
OmniTrust protects your WooCommerce store from two costly problems: cash-on-delivery (COD)
non-collection and wardrobing/return abuse. It never blocks or bans a customer at checkout.
Instead, it uses a “Flag & Hold” approach that runs quietly in the background, after checkout.
How it works
- After a shopper completes checkout, the plugin sends the order to the OmniTrust API for a
fraud-risk evaluation, in the background (via WooCommerce’s Action Scheduler). This never
delays or blocks checkout.
- If OmniTrust returns a high risk verdict, the order is set to On hold, a private
(admin-only) order note explains why, and the order is tagged for review.
- If the verdict is low risk, the order’s status is left unchanged; a private note simply
confirms the evaluation completed.
- If the evaluation call itself fails, a private note says so — no automatic retry happens, but
you can manually trigger a “Start evaluation” action from the order screen at any time.
- Once an order has been evaluated, you can also manually report COD non-collection or
wardrobing/return abuse for it from the order screen. This helps build the wider OmniTrust
merchant network that other stores’ evaluations rely on too.
No email or other message is ever sent to the buyer as a result of any of this.
Important limitation: Flag & Hold is not a pre-purchase block
Flag & Hold runs after checkout completes, asynchronously, so it never slows down or blocks
your buyers — but that also means it is a weaker guarantee than a pre-purchase block. If your
g. same-minute pick/pack/ship), it is possible for an order
to ship before the hold has a chance to apply.
Pricing
OmniTrust offers a genuine Free tier — $0/mo, up to 100 risk checks per month, with the
same reporting features as every paid tier. Two paid tiers unlock a higher monthly evaluation
limit for busier stores: Standard (€10/mo, up to 1,000 risk checks/month) and Business
(€50/mo, unlimited risk checks). All three tiers share identical Flag & Hold and reporting
behavior — the only difference between tiers is how many /evaluate risk checks are included
per month.
After installing, go to Settings → OmniTrust to choose a tier (this takes you to a secure
LemonSqueezy checkout) or, if you already have a license key, activate it directly on the same
page. Without an active license key, the plugin stays installed but inactive — its hooks simply
do not register, so it never partially breaks your store or nags you to upgrade.
External services
This plugin connects to the OmniTrust API (OmniTrust’s own first-party backend — not a
third-party service) for fraud-risk evaluation and for the manual reporting features described
above. This happens:
- automatically, in the background, shortly after a customer completes checkout, sending
order and store data for fraud-risk evaluation, and
- only when you manually trigger “Report COD non-collection” or “Report wardrobing/deshopping”
on a specific order, sending that order’s data for the report.
If OmniTrust’s API is ever unreachable, the plugin fails safe: your orders are left in their
normal, unmodified state, and no error is ever shown to the buyer.
This service is provided by OmniTrust: Privacy Policy,
which covers full details on what is collected, how it’s hashed (identifiers are HMAC-hashed
on arrival and never stored raw), and how cross-merchant matching works.