Stop Fake Signups
Verify
Every Customer.
OTP-based email verification for WooCommerce registration, guest checkout, and login authentication. Block spam accounts, prevent fake orders, and secure every customer touchpoint.
Version 2.9.5 Last updated: May 2026 Compatible with WooCommerce 10.7 WordPress 6.9.4
Email Verification
OTP-based customer verification
Alex Wilson — Signup
OTP verified · [email protected]
Jane Roberts — Checkout
Guest verification · [email protected]
Mike Kim — Login
New device detected · OTP sent
Spam Registrations Blocked
94% reduction this month
Spam Registrations
-94% Reduced
Is your customer database polluted with fake accounts?
Bots, fake signups, disposable emails, and free-product hunters quietly poison your customer data, deliverability, and analytics. It's time to verify every customer touchpoint.
Without CEV PRO
- Bot Signups & Fake Accounts
Spambots create accounts in seconds. Your user database fills with garbage that breaks analytics and bounces emails.
- Free Product Abusers
Fake emails sign up for free trials, free products, and promotional offers repeatedly. Real customers never see them.
- Disposable Email Flood
Mailinator, GuerrillaMail, 10minutemail — temporary email providers let abusers create unlimited fake accounts.
- Unauthorized Logins
Stolen credentials from data breaches give attackers access to real customer accounts. No second layer of security.
With CEV PRO
- OTP Email Verification
Every signup, checkout, and suspicious login requires a one-time password sent to a real email address. Bots and fakes blocked at the door.
- Disposable Email Blocking
3,000+ bundled blocklist of disposable email providers, plus custom rules. Fake-email signups stopped instantly.
- 2FA Authentication
Add Google Authenticator, Authy, or Microsoft Authenticator as a second layer for sensitive operations — globally or per role.
- Auto-Cleanup Engine
Daily cron jobs automatically remove stale unverified accounts and clean up your customer database — with built-in safeguards.
Verify Every Customer Touchpoint in 4 Steps
Trigger Verification
At signup, checkout, or suspicious login, CEV PRO sends a 6-digit OTP to the customer's email. The action pauses until they verify.
Validate the Email
Behind the scenes, CEV checks disposable email blocklists, runs DNS-based MX record validation, and verifies the address is reachable.
Customer Verifies
Customer enters the OTP code in the verification popup. If 2FA is enabled, they also confirm via Authenticator App. Verified.
Auto-Cleanup Unverified
Daily cron jobs handle the rest — re-engage lapsed signups with reminder emails, auto-delete stale accounts (with safeguards).
Everything You Need to Verify, Secure, and Clean Up
From OTP verification to 2FA, disposable email blocking to DNS validation — the complete email security toolkit for WooCommerce.
OTP-Based Email Verification
Send a one-time password to the customer's email at every critical touchpoint — signup, checkout, login from new device, or after inactivity. Real emails verified; bots and fakes blocked at the door.
- 6-digit OTP via email (no third-party services required)
- Verification at signup, checkout, and login
- Configurable expiry time
- Resend OTP option for failed deliveries
- No coding required — works out of the box
- Fully customizable email content
Smart Form — Branded Login & Registration
Replace WooCommerce's default login and registration form with a fully-branded Smart Form. Pick from four ready-made layouts, let customers register with email or phone, and offer password or OTP-based login. Place it on My Account or any page via shortcode.
- 4 ready-made template layouts
- Optional My Account page takeover
- Password, Email OTP, or Phone OTP login
-
Place anywhere with
shortcode
Login
- Email or phone (SMS) registration
- 4 SMS gateways: MSG91, Twilio, Vonage, WhatsApp
Phone (SMS) Verification
Verify customers via SMS OTP as an alternative to email verification. Customers can register and verify with their phone number using MSG91, Twilio, Vonage, or WhatsApp as the SMS gateway.
- SMS-based OTP verification
- 4 supported gateways: MSG91, Twilio, Vonage, WhatsApp
- Register with phone number instead of email
- Works with Smart Form and standard WooCommerce registration
- Configurable SMS message content
- Fallback to email OTP if SMS fails
Two-Factor Authentication (2FA)
Add Google Authenticator, Authy, or Microsoft Authenticator as a second layer of security for customer logins. Block credential-stuffing attacks even when passwords are compromised in data breaches.
- Google Authenticator support
- Authy & Microsoft Authenticator support
- Works with any TOTP-compatible app
- QR-code setup for customers
- Optional or required per user role
- Backup codes for account recovery
Role-Based Verification Rules
Enforce verification rules per user role. Require 2FA only for administrators and shop managers. Skip verification for trusted VIP customers. Tailor security to your store's operational structure.
- Per-role verification settings
- 2FA enforcement per role
- Skip verification for trusted roles
- Granular control for complex stores
- Works with custom role plugins
- Per-role policy override
Paid-Order Gatekeeping
Prevent free product and coupon abusers by delaying customer activation until their first paid order is completed. Accounts created via $0 or zero-total checkout orders will remain in "pending paid order" status and won't have customer access until a genuine payment is confirmed.
- Block free/coupon product abusers
- Keep zero-total checkout accounts in pending status
- Activate only when order status is completed with non-zero total
- Detailed paid order verification history
- Manual override to activate users manually
- Works seamlessly with standard WooCommerce gateways
Verification Analytics Dashboard
Know exactly how CEV PRO is protecting your store. The new Analytics tab shows signups, verification rate, blocked spam totals, average time-to-verify, top blocked disposable domains, and a signup-to-verify funnel chart.
- Total signups + verified vs unverified breakdown
- Spam registrations blocked
- Average time-to-verify metric
- Top blocked disposable domains chart
- Signup-to-verify funnel visualization
- Date range filters (7/30/90 days)
Disposable Email Blocking
Block signups from temporary email providers (Mailinator, GuerrillaMail, 10MinuteMail, and 3,000+ more). Bundled blocklist updates regularly. Add your own custom-blocked domains and customize the rejection message.
- 3,000+ bundled disposable email domains
- Admin-defined custom block list
- Catches signups before they're created
- Eliminates a major spam vector
DNS-Based MX Record Validation
Before sending an OTP, CEV PRO validates that the email domain actually has working mail servers (MX records). Catches typos, fake domains, and non-existent providers — saves you SMS costs and reduces bounces.
- Real-time MX record DNS lookup
- Catches typos (gmail.con, yaho.com)
- Blocks fake/non-existent domains
- Improves email deliverability reputation
B2B Allowlist & Block Specific Addresses
Run a B2B store or restricted-access community? Allow only specific domains to register (e.g., partner.com, customer.org). Or block specific email addresses that have abused your store before.
- B2B Allowlist mode
- Block specific email addresses
- Per-domain or per-address rules
- Perfect for partner-only stores
Automatic Database Cleanup
Daily cron jobs automatically remove stale unverified records and auto-delete unverified WP user accounts — with safeguards. Never pay for storage or send emails to unreal customers again.
- Auto-delete unverified user accounts
- Hard 30-day minimum retention safeguard
- Skips users with orders/subscriptions
- Preview accounts before deletion
Force Re-Verify All Customers
Take control during security incidents or system updates. Instantly flip all verified customer accounts back to unverified status in bulk. Upon their next login, customers will be prompted to verify their access via email or SMS OTP. Safe background batching protects your server from timeout errors.
- Bulk unverify entire customer base with one click
- Background queue processing to prevent server timeouts
- Optional exclusion lists for specific trusted user roles
- Stops credential-stuffing and bot waves dead in their tracks
- Real-time visual queue progress bar and status
- Fully logged database security action
Re-engagement Reminder Emails
Don't lose lapsed signups. Automatically email unverified users at 1-hour, 24-hour, 3-day, and 7-day intervals with a one-click verification link. Fully customizable via the email customizer.
- Auto-send reminders at 1h / 24h / 3d / 7d intervals
- One-click verification link in email
- Bulk send from Unverified Users table
- Recover up to 30%+ of lapsed signups
Fully Customizable Verification Popup
Match your brand identity. Customize the verification popup layout, colors, text, and branding so verification feels native — not bolted on.
- Color and layout customization
- Custom logo upload
- Multi-language support
- Live preview while editing
Why Stores Choose CEV PRO
Built for store owners who take security, deliverability, and clean data seriously.
Eliminate Spam Registrations
Bot signups blocked at the door.
Block Disposable Emails
3,000+ temporary email providers rejected automatically.
2FA Security Layer
Authenticator app protection for sensitive accounts.
Role-Based Rules
Enforce 2FA per user role, not site-wide.
DNS Validation
Reject fake domains before sending OTPs.
Auto-Cleanup Engine
Daily cron removes stale unverified accounts.
Re-engagement Automation
Recover lapsed signups with reminder emails.
Verification Analytics
See exactly what spam you're blocking.
B2B Allowlist Mode
Only approved domains can register.
Better Email Deliverability
Verified addresses = lower bounces.
HPOS & Block Checkout Ready
Built for modern WooCommerce.
Ongoing Updates & Priority Support
Regular updates and dedicated support.
Compare CEV Free vs PRO
| Features | Free | PRO |
|---|---|---|
| Basic Registration Verification | ||
| Checkout Verification | ||
| Login Verification (New Device) | ||
| 2FA via Authenticator AppNEW | ||
| Role-Based Verification RulesNEW | ||
| Verification Analytics DashboardNEW | ||
| Disposable Email Blocking (3,000+)NEW | ||
| DNS-Based MX ValidationNEW | ||
| B2B Allowlist ModeNEW | ||
| Block Specific Email AddressesNEW | ||
| Auto-Cleanup Verification LogNEW | ||
| Auto-Delete Unverified UsersNEW | ||
| Re-engagement Reminder EmailsNEW | ||
| OTP / Popup Verification | ||
| Customizable Email Templates | ||
| Customizable Verification Popup | ||
| Login Notification Emails | ||
| HPOS Compatible | ||
| WooCommerce Block Checkout | ||
| Priority Support | ||
| Installed | Upgrade to CEV PRO |