Removing payment options from cart page due to spam orders

This topic has 7 replies, 2 voices, and was last updated 1 months, 3 weeks ago ago by DebbieC

  • Avatar: DebbieC
    DebbieC
    Participant
    October 8, 2025 at 21:26

    Hi,

    I have been getting hundreds of spam orders on the site so set up a recaptcha at checkout. This has prevented any bots placing spam orders there. However, I am still getting those spam orders with all of them now going to Paypal.

    The only other place they can be doing that is on the Cart page where customers can check out quickly via Paypal, Gpay or Amazon.

    I either need to know – how to add a re-captcha on that page – or remove the Paypal option from the Cart page.

    Could you please let me know how do do this/edit the cart page

    Thanks, Debbie

    6 Answers
    Avatar: Justin
    Luca Rossi
    Support staff
    October 9, 2025 at 09:15

    Hello @DebbieC,

    Could you please specify which section you would like to remove from the cart page?

    https://prnt.sc/92Yju1vlkJgF

    Thank you for your cooperation.

    Best regards,
    8Theme Team

    Avatar: DebbieC
    DebbieC
    Participant
    October 9, 2025 at 10:20

    Hi

    I have managed to remove the Paypal button using Paypals own plugin but I need to remove all the payment options to avoid spammers using them. So the cart should just show the ‘Proceed to Checkout’ button.

    Thanks, Debbie

    Avatar: Justin
    Luca Rossi
    Support staff
    October 9, 2025 at 10:54

    Dear @DebbieC,

    Could you please check now: https://prnt.sc/2uYBm_naz3LI?

    Best Regards,
    8Theme’s Team

    Avatar: DebbieC
    DebbieC
    Participant
    October 9, 2025 at 17:16

    Hi, Yes thank you. All payment options are removed.

    However, I am still getting all the spam orders via Paypal even though it’s no longer available anywhere except the checkout which is reCaptcha protected. I don’t understand how they are getting through, I’ve tested this and I can’t make any payment without checking the recaptcha. Any ideas? Debbie

    Avatar: Justin
    Luca Rossi
    Support staff
    October 10, 2025 at 03:33

    Hi @DebbieC,

    Please try with the following solutions:

    1. Install Anti-Spam Plugins
    – WooCommerce Anti-Fraud
    – Akismet Anti-Spam
    – CleanTalk

    2. Require Account Registration: Go to WooCommerce → Settings → Accounts & Privacy
    Enable “Allow customers to place orders without an account” (uncheck this). This forces email verification

    3. Set Minimum Order Amount

    
    add_action('woocommerce_check_cart_items', 'set_minimum_order_amount');
    function set_minimum_order_amount() {
        $minimum = 10; // Set your minimum amount
        if (WC()->cart->subtotal < $minimum) {
            wc_add_notice(sprintf('Minimum order amount is %s', wc_price($minimum)), 'error');
        }
    }
    

    4. Block Disposable Email Domains

    
    add_filter('woocommerce_checkout_process', 'block_disposable_emails');
    function block_disposable_emails() {
        $blocked_domains = array('tempmail.com', 'guerrillamail.com', '10minutemail.com');
        $email = $_POST['billing_email'];
        $domain = substr(strrchr($email, "@"), 1);
        
        if (in_array($domain, $blocked_domains)) {
            wc_add_notice('Please use a valid email address.', 'error');
        }
    }
    

    5. Implement Rate Limiting
    Limit orders from the same IP address:

    
    add_action('woocommerce_checkout_process', 'limit_orders_by_ip');
    function limit_orders_by_ip() {
        $ip = $_SERVER['REMOTE_ADDR'];
        $orders = wc_get_orders(array(
            'limit' => 5,
            'customer_ip_address' => $ip,
            'date_created' => '>' . (time() - 3600) // Last hour
        ));
        
        if (count($orders) >= 5) {
            wc_add_notice('Too many orders from your location. Please try again later.', 'error');
        }
    }
    

    6. Additional WooCommerce Settings

    – Disable guest checkout for higher security
    – Enable email verification for new accounts
    – Use payment gateways with fraud protection (Stripe Radar, PayPal fraud protection)

    7. Use a Web Application Firewall (WAF)

    – Cloudflare (free plan available)
    – Sucuri
    – Wordfence (WordPress security plugin)

    Hope it helps!

    Avatar: DebbieC
    DebbieC
    Participant
    October 15, 2025 at 10:10

    Thanks for the support! My topic “Removing payment options from cart page due to spam orders” has been successfully resolved.

  • Viewing 7 results - 1 through 7 (of 7 total)

The issue related to '‘Removing payment options from cart page due to spam orders’' has been successfully resolved, and the topic is now closed for further responses

We're using our own and third-party cookies to improve your experience and our website. Keep on browsing to accept our cookie policy.