smd_ksu

@henrihappy For me the issue ended up being the API which you can block. Check this thread solution – https://www.ads-software.com/support/topic/attcked-by-card-testing-decline-orders-with-origin-unknown/page/3/#post-18202121

For anyone else who runs across this. Found this code – https://wordpress.stackexchange.com/questions/427747/how-to-block-checkout-process-when-session-origin-is-unknown

Which seems to indicate this is where to find the order attribution origin.

wc_order_attribution_utm_source

@reynierc The only reference I see is this – https://woocommerce.github.io/code-reference/files/woocommerce-src-admin-api-reports-orders-datastore.html#source-view.555

Don’t see anything under WC_Order

Same issue here – https://www.ads-software.com/support/topic/attcked-by-card-testing-decline-orders-with-origin-unknown/

You might try the function and rewrite that worked for me in that thread.

Same issue here – https://www.ads-software.com/support/topic/attcked-by-card-testing-decline-orders-with-origin-unknown/

You might try the function and rewrite that worked for me in that thread.

@sonic1243 That one line is all I added to the bottom of my functions.php file. I also think the Rewrite code is important which would go in the .htaccess file for most, or virtual host file for people who know how to use those.

Same here. Hard to believe they are actual people doing it but they are verified according to the plugin.