About this plugin
Talistech Checkout Blocker for WooCommerce prevents selected customers from placing WooCommerce orders. It validates checkout data on the server and supports both the classic checkout and the block-based Checkout, including HPOS order storage. For signed-in customers, email rules check both the account email and the billing email; name and address rules use the submitted billing details.
Rules can match:
- Exact email addresses, complete domains, and wildcard email patterns.
- Exact full billing names and wildcard name patterns.
- Billing addresses using street, postcode, and country components.
The plugin can show a custom customer notice, notify administrators, force matching customers to log out, and destroy active sessions for exact blocked email addresses. Administrators and shop managers are protected from forced logout and session destruction.
This is an independent extension by Talistech. It is not affiliated with or endorsed by WooCommerce or Automattic. WooCommerce and its associated designs are trademarks of Automattic Inc.
The plugin has no external API, account, tracking or telemetry dependency. Optional administrator notifications use your site’s WordPress mail configuration, which may use a mail provider.
Rule examples
Email rules
- [email protected] blocks one exact email address.
- @example.com blocks every address directly on that domain.
- test-*@example.net blocks matching email patterns.
- *@*.example.com can match addresses on subdomains.
Full-name rules
- Jan Jansen blocks one complete billing name.
- * De Smet blocks any full billing name ending in De Smet.
Names are matched without casing, accent, or repeated-space differences, including Unicode letter casing.
Billing-address rules
Use street and number|postcode|country code.
- Keringstraat 7|9506|BE blocks one exact billing address.
- *laan 10|2000|BE uses a wildcard in the street component.
- Keringstraat 7|*|BE accepts any postcode for that street address.
Use the two-letter country code stored by WooCommerce, such as BE, NL, or FR.
Privacy
Rules containing email addresses, names and addresses are stored in this site’s WordPress options until removed by an administrator or the plugin is uninstalled. Administrator notifications are disabled by default. If enabled, checkout details are sent through the site’s mail configuration; retention of these emails depends on your mail provider and shop policies.
No data is sent to Talistech.
Notifications may contain billing and account email addresses, billing name and address, IP address, user agent and date. Checkout URLs exclude query parameters. Notifications are limited to one per IP address per ten minutes and sixty per site per hour.
Only keyed IP hashes and counters are stored for throttling; expired hashes are pruned on the next notification attempt. Mail failures do not unblock checkout.
The WordPress privacy policy guide includes suggested text. Adapt it to your shop. Uninstalling removes plugin settings, notification limits and legacy notification transients from all sites in a multisite installation.
Deactivation retains settings.
Support
com/talistech/wp-checkout-blocker-by-talistech. Do not include customer personal data in public reports.
WP-CLI
Use wp talistech-cb list --type=email, add, remove, and destroy_sessions to manage rules and exact-email sessions.