Enable Guest Checkout Enables Spam Orders
-
I have been having issues with Woocommerce checkout, that customers are met with an “invalid Username or Password” error with no fields in which to enter any such information. I had been getting a lot of spam/fake orders, so disabled all account setup features on checkout. I suspect this was the root of the problem but have no idea how to fix it. I enabled guest checkout again yesterday and began receiving more fake orders. It would be nice to allow customers to create an account, but it’s not necessary since many of my orders are one off, but I also don’t want to turn them away with a requirement that has no resolution. I think I’ve probably lost a few sales as a result. I did keep the account set up in My Account enabled. Any suggestions?
-
Hi @stvdesigns ,
Thank you for reaching out!
Based on your message and the nature of the issue, it seems your site might be experiencing card testing activity. This often occurs when guest checkout is enabled, as it’s a common entry point for such fraudulent behavior.
Unfortunately, this type of activity has been increasing, especially during the holiday season. Rest assured, our team is actively working on solutions to help reduce its impact.In the meantime, we recommend reviewing the steps in our guide on how to respond to card testing. If you’d like to prevent it while keeping guest checkout enabled, you can jump directly to this section: Preventing Card Testing.
For additional information, you can also check out this developer blog that provides more details on preventing card testing: Card Testing Attacks and the Store API.
Thank you for your understanding, and feel free to reach out if you have any further questions!
- You must be logged in to reply to this topic.
