Why do fake COD orders cost so much?
With cash on delivery, you pay before you know if the order is real: the product leaves your stock, the courier charges for the trip, and a refused parcel can cost a return fee on top. A fake order costs all of that and brings in nothing. It also counts as a conversion in your ad accounts, which teaches the platforms to find more buyers like it.
Spam protection stops the obvious ones before an order is ever created.
What can you block?
- Phone numbers you’ve had fake or refused orders from.
- Emails, one address at a time or a whole domain at once.
- IP addresses that keep sending junk orders. An allow-list of trusted IPs keeps the rules off your office or your partners.
- Postal codes you don’t deliver to, or that keep refusing parcels.
Build your block lists from your own history: the numbers and addresses behind refused parcels are the best place to start.
How do order limits work?
- Orders per buyer in a time window. For example, no more than 2 orders from the same buyer in 24 hours, which stops one person ordering again and again.
- Maximum quantity. Cap how many units one order can contain, so a prank order for 50 units never reaches your courier.
What do blocked buyers see?
Your own message, in your own words. Keep it neutral, such as asking them to contact you, since a real buyer can occasionally hit a limit.
Every refused attempt is logged with the phone, email or IP and the reason, and kept for 30 days, so you can see which rule fired and adjust it.
How do you test without blocking yourself?
Register your team’s phones and computers as Test devices. Orders from them don’t trip the limits, so you can test the form as often as you like without ending up on your own block list.
What doesn’t spam protection do?
- No OTP verification. EverCore doesn’t send one-time codes by SMS or WhatsApp. If code verification is central to how you work, compare with apps that offer it, such as Releasit.
- No automatic confirmation calls. Calling to confirm orders stays your team’s job.
- No promises. It blocks the patterns you set; it can’t catch every fake order.
Use these rules alongside your confirmation calls. Buyers who started the form but didn’t order go to your abandoned orders sheet, so you can tell the two apart.