Recommended First Setup for Store Owners

The safest first setup is gradual. Start by blocking only details you are sure about, then add stronger rules after you have reviewed real results.

Step 1: Add One Test Entry

1. Go to Blacklist Manager > Dashboard.
2. Open the tab for the type you want to test, such as Blocklist, IP address, or Domain.
3. Add a test email address or phone number that you control.
4. Mark it as blocked, not just suspect, if you want checkout to stop it.

Step 2: Configure Basic Checkout Protection

1. Go to Blacklist Manager > Settings > General.
2. Find Email address & Phone number.
3. Set Order action to Prevent order for your first test.
4. Leave Time delay at 0 unless you intentionally want the order created first and canceled later.
5. Click Save Settings.

Step 3: Test A Checkout Match

1. Open your store in a private browser window.
2. Add a low-value test product to cart.
3. Go to checkout and enter the blocked test email or phone number.
4. Try to place the order.
5. Confirm the order is prevented or handled according to the action you selected.

Step 4: Enable Only The Areas You Use

• Enable Registration action only if customers can register on your site.
• Enable Comment action only if you allow comments or product reviews.
• Enable Form action only if you use Contact Form 7, Gravity Forms, or WPForms.
• Enable WooCommerce REST API only if orders can be created by API integrations.
• Enable Domain blocking only when you know which email domains should be blocked.

Step 5: Use Premium Gradually

If Premium is active, start with these safer choices:

• Use Anti-bots > Balanced first. Move to Strict only during active attacks.
• Use automation actions such as Email alert or Add to suspects before Add to blocklist.
• Use Treat as score when you want risk scoring instead of immediate action.
• Do not enable too many country, IP, address, and payment rules on the same day. It makes false positives harder to diagnose.

Recommended First-Day Checklist

• One blocked email test works.
• One blocked phone test works, if you use phone blocking.
• Registration, comments, reviews, and forms are only enabled where needed.
• Premium license status is active, if Premium is installed.
• Team members know where to review Dashboard and Activity logs.

Expected Result

You should have a working baseline that blocks known bad details without creating unnecessary friction for normal customers.