Card-Testing Bots Hit Your Checkout? Now They Hit a Wall.

You wake up to a wall of tiny declined orders. Bots used your checkout to test stolen cards. Every attempt cost you a gateway fee, and the ones that went through become disputes.

WP EasyCart now has Checkout protection, free in every edition and switched on at the Standard level the moment you update. It counts failed payments from each device, network address, email and card. At Standard, 5 failures in 10 minutes pauses that shopper for an hour. Real customers almost never meet it. Bots guessing gift card and coupon codes get the same treatment.

Count. Pause. Block.

When declines spike across the whole store, it calls an attack. Every shopper then gets a quick human check above Place order until things calm down, and you get an email when it starts and when it ends. Use Cloudflare Turnstile, free and usually invisible, or Google reCAPTCHA. A payment that slips through during an attack is tagged Possible card test, so you refund it before you ship.

The Status card shows the last seven days: attempts stopped, attacks stopped, and paused shoppers who later paid. Pick Relaxed, Strict or Custom if your store needs it.

Security, payments, shipping and tax, in one plugin you already have. No extra firewall plugin to bolt on.

Where: WP Admin › EasyCart › Settings › Checkout protection. Plan: Free, in WP EasyCart 6.0 and later. Read the card-testing guide for every level and what to do during an attack.