Block Countries in WooCommerce: Stop Fake Orders

You open the orders screen and see five new orders from the same country, all with different names, all paid with a card that later fails or gets disputed. You refund, ship nothing, and lose the payment fee anyway. If one region keeps sending you bad orders, a country rule is often the fastest fix.

Blocking countries sounds like one switch, but WooCommerce has four different jobs hiding behind it, and each one needs a different tool.

GeoBlock — Country Restrictions for WooCommerce handles the store-level part: it restricts products, categories and payment methods by country, so risky orders never reach checkout.

This guide shows how to spot the pattern, pick the right tool for each job, set up a product rule, switch off Cash on Delivery for one country and test it all before you trust it.

Why fake orders from one country cost you money

A fake or fraudulent order is never free. You pay payment processing fees, handle refunds or chargebacks, lose stock for a while and spend time on support. A single chargeback can cost more than the profit on several honest orders.

Country blocking does not stop all fraud, and it is not a substitute for a full security routine (see our WooCommerce fraud prevention guide). It is one cheap layer that works well when your bad orders cluster in a few places.

Step 1: find the pattern in your orders

Before you block anything, check that the problem really is geographic. Open WooCommerce → Orders and look at the last 30 to 60 days of failed, refunded and disputed orders.

1. Group by billing and shipping country
   Note which countries appear on the bad orders and how many good orders come from the same places.
2. Look for mismatches
   Billing in one country and shipping in another is a common sign of reshipping or card testing.
3. Decide what you actually want to stop
   Selling a specific product there, shipping there, or only accepting certain payment methods there are different decisions.

Step 2: pick the right tool (4 jobs, 4 tools)

Honest advice first: you do not always need a plugin. Match the job to the tool.

One point to be clear on: GeoBlock works inside WooCommerce. It does not block a whole country from the whole site, and visitors from a restricted country can still browse the rest of your store. For that you need a firewall.

How to restrict a product by country with GeoBlock Free

Want to try it first? There is a free version on WordPress.org. These steps work with it.

1. Install and activate GeoBlock
   Go to Plugins → Add New, search for WindCodex GeoBlock, then install and activate it.
2. Enable WooCommerce geolocation
   Guests are detected with WooCommerce geolocation (MaxMind GeoLite2), so make sure it is turned on in WooCommerce settings. Logged-in customers are matched by their saved shipping address, then billing address.
3. Open the product and add a country rule
   In the product editor, find the GeoBlock settings and choose Include mode (sell only in these countries) or Exclude mode (sell everywhere except these countries).
4. Write a clear message
   Set a custom restriction message so honest customers understand why they cannot buy, and choose where it appears on the page.
5. Check the direct URL setting
   In Catalog Only mode, if “Allow purchase via direct URL” is ON, a restricted product can still be bought through its direct link. Switch it OFF for full cart and checkout protection.

How to block Cash on Delivery for a country (GeoBlock Pro)

Cash on Delivery is a favourite for fake orders because nothing is paid up front. If a country sends you unreliable COD orders, you can keep card payments there and remove only the risky method.

1. Upgrade to GeoBlock Pro
   Payment gateway restrictions are a Pro feature.
2. Open the payment gateway rules
   Choose Cash on Delivery from your list of gateways.
3. Select the countries
   Pick the countries where COD should be hidden at checkout.
4. Save and test
   Everyone else still sees COD as normal.

Want to limit only the payment side? See how to restrict payment methods by country in WooCommerce.

Test your rule before you trust it

A rule you have not tested is a guess. Use a logged-out browser or a private window, because your admin session can behave differently.

• Turn on the Debug Mode in GeoBlock to see which country was detected for your visit.
• Try adding a restricted product to the cart as a guest, then try its direct URL.
• Go to checkout with a test address in a blocked country and confirm the payment method is hidden.
• Repeat as a logged-in customer with a saved address in the restricted country.

What about VPNs? Honest limits of country blocking

Country blocking is based on where a visitor appears to be. Someone using a VPN can look like they are in another country, so it will not stop a determined fraudster. It works best against the common case: low-effort orders from regions where you have no customers.

That is why it belongs next to other layers: payment fraud screening, address checks and bot protection. If bots are copying your products and prices, ScraperBlock covers that separate problem. For a wider look at the topic, read How to Block Countries in WooCommerce (2026 Complete Guide).

FAQ

Does blocking a country stop fraud orders in WooCommerce?

It reduces them when your bad orders come from a few regions, but it does not stop all fraud. Use it as one layer.

Can I block countries in WooCommerce without a plugin?

Yes, for selling and shipping. WooCommerce → Settings → General lets you choose the countries you sell to and ship to. Product-level and payment-level rules need a plugin.

Does GeoBlock block my whole website by country?

No. It works inside WooCommerce on products and payment methods. Whole-site blocking is a job for Cloudflare or a hosting firewall.

How do I switch off Cash on Delivery for one country?

Use the payment gateway restrictions in GeoBlock Pro to hide Cash on Delivery for the countries you choose.

Will country blocking stop VPN users?

Not reliably. A VPN can hide a visitor’s real location, so combine country rules with other protection.

Conclusion

Start by finding out whether your bad orders really cluster by country, then match each job to the right tool: a firewall for the whole site, WooCommerce settings for selling and shipping, GeoBlock for products and payment methods.

Test every rule logged out, and be honest about VPN limits. If you want the payment rules, use code WELCOME20 for 20% off your first order (once per customer, not valid on sale items).