A WooCommerce plugin built in Bangladesh for cash-on-delivery stores. It catches one phone ordering with many SIMs, bot orders placed in seconds, and repeat returners — and it keeps fake orders' Purchase events away from Facebook, so your ads learn from real buyers only.
The real cost of a fake order isn't just a returned parcel — Facebook learns the wrong buyer and your ad budget burns.
A competitor orders from one phone with ten SIMs — phone-number blocking alone catches nothing.
Fake orders fire Purchase on your pixel, so Meta shows your ads to more people just like them.
The customer never picks up, the parcel comes back — you lose the courier fee and the packaging.
Strict rules block real customers too, and you never find out who was blocked.
An order 3 seconds after landing is a script, not a person — most plugins never look at timing.
When a flood of fake orders hits, there's no brake — and your ad account data gets ruined.
Every rule is yours to switch on or off. Day to day, keep the essentials on so real customers can't place a double order by mistake or re-order just to ask a question. If someone — or a competitor — targets you with fake orders, switch on the advanced rules (same browser/IP, Smart Shield, Under Attack Mode).
Limit orders per phone, per browser/device or per IP within a time window. Switching SIMs doesn't get around it.
Holds the Purchase event of suspicious orders. It's sent through the Conversions API only when you confirm or complete the order — never if it's cancelled.
When a fake-order wave hits, hold every order's Meta data for a few hours — one click, or automatic. Your store stays open.
Every flagged order shows why — and which earlier order it matched: #number, same number / same IP / same device. Even with a new number, earlier orders from the same phone or network are listed. A courier report shows how many parcels the customer took before.
Nothing to connectSee how many seconds after landing each order was placed. Too fast means hold. Autofill users are exempt.
Typed, autofill, paste or voice — see how the form was filled right in the order list. Voice typing counts as a real customer.
Abandoned checkouts and every attempt we blocked, with the reason, in one list. Call and turn it into a real order in one click.
Book Steadfast or Pathao parcels straight from the order list. Order status updates itself from the courier's webhook.
Uses your courier accountWrong numbers are flagged as they're typed. OTP when you need it. Block-list entries expire on their own, with CSV import/export.
Your license key appears on screen and in your inbox the moment payment clears. No waiting on anyone.
Download the zip from your dashboard → WordPress › Plugins › Add New › Upload. Paste the key and you're done.
The essentials come switched on. If you're targeted, turn on the advanced rules. New versions show up as "Update now" on your Plugins page.
| Feature | Typical plugin | Fake Order Shield |
|---|---|---|
| Block repeat orders from one phone number | ✓ | ✓ |
| Stop one device ordering with different SIMs — right after the first order | Partial | ✓ |
| Rules apply from the first order | — | ✓ |
| Decisions based on time-to-order | — | ✓ |
| Detects typed / autofill / paste / voice | — | ✓ |
| Keeps fake orders out of Meta Purchase | — | ✓ |
| Under Attack Mode | — | ✓ |
| Reason + the matching earlier order (#number) | — | ✓ |
| Every blocked attempt saved with its reason (recover real buyers) | Partial | ✓ |
| Courier entry & webhook status | ✓ | ✓ |
The rules were tuned on hundreds of real cancelled COD orders from Bangladeshi stores — rules that blocked real buyers were dropped.
Each feature is isolated. If one ever fails, your checkout keeps working and orders keep coming.
Your courier passwords and Meta token stay on your site and never reach our server.
Plans only differ in length. Each license covers one website.
Nothing is lost. The attempt is saved in Incomplete Orders as "Blocked : reason" with name, phone, address and products. Call them and create the real order in one click. The customer also sees your support number on screen.
No. Fraud detection is the plugin's own job — it works from device, phone, IP, timing, input method and order history, with nothing to connect. Your Pathao/Steadfast account is only needed if you want to book parcels from the order list and have statuses update automatically.
For suspicious orders (too fast, pasted form, a number/IP/device that was cancelled before, or during Under Attack) it stops Purchase from both the browser pixel and the server. When you confirm or complete the order, it's sent through the Conversions API (needs your Pixel ID and token — PixelYourSite's are used if installed). Cancelled orders are never sent. Meta learns from real buyers only.
No. Autofill users are exempt from the time rule and voice typing counts as a real customer. The order list simply shows how the form was filled.
The plugin checks for a new version once a week. When one is out, "Update now" appears on your Plugins page like any other plugin. You can also press "Check for update now" in settings.
Yes. Remove the old site from your dashboard, then enter the key on the new site.
Protection rules pause, but your settings, block list and Incomplete Orders stay. Renewing adds time from your old end date, so no days are lost.
Running on your store within 2 minutes of buying.