xpay✦ Commerce
Directory
WooCommerce plugins
Customer Email Verification for WooCommerce
Customer Email Verification for WooCommerce
Block fake WooCommerce registrations with OTP email verification. Customers verify their email before their account is created — no code required.
4.4
(19 ratings)Will this break my store?
What the WordPress.org registry says about keeping Customer Email Verification for WooCommerce running.
Tested to 7.1.1
Tested against the WordPress branch in use today.8 days ago
At least 7.2 releases a year since launch. WordPress.org only lists versions still available for download, so the real number may be higher.7.2
Your host must be running at least this version.5.3
woocommerce
These must be installed and active first.4
Maintenance & trust
Scored on how Customer Email Verification for WooCommerce is looked after — not on how many stores run it.
76
out of 100Maintenance
35 / 35WordPress compatibility
20 / 20Support responsiveness
0 / 20Merchant satisfaction
11 / 15Listing transparency
10 / 10Ratings
4.4
19 ratingsCustomer Email Verification for WooCommerce stops fake accounts and spam registrations at the source. When a customer tries to register on your WooCommerce store, they must verify their email address with a one-time OTP code before their account is created — so every account on your store has a real, working email address behind it.
The verification popup appears seamlessly during registration, the OTP is sent immediately via WooCommerce’s email system, and accounts are only created after successful verification. Setup takes minutes, requires no coding, and works out of the box with WooCommerce’s standard registration flow.
HPOS Compatible · 2,000+ Active Stores · Free & Open Source
How It Works
- A customer enters their email and clicks to register on your WooCommerce store.
- A verification popup appears and an OTP code is sent to their email address immediately.
- The customer enters the OTP. If correct, their account is created. If not verified, no account is created.
An address that doesn’t exist, or that nobody can actually open, never receives a code — so the account is never created. Blocking disposable and temporary email providers outright, and scoring each signup for risk before it becomes a customer, are available in CEV PRO.
What’s Included in the Free Version
- OTP-based email verification at registration — Customers must verify their email with a one-time code before their WooCommerce account is created. No verification, no account.
- Verification popup on the registration form — A modal popup appears instantly after the customer enters their email, prompting them to check their inbox and enter the OTP. No page reload required.
- Resend OTP option — Customers can request a new OTP if they didn’t receive the first one.
- Customizable verification popup — Modify the popup’s design, colors, and messages to match your store’s branding using the built-in live preview customizer.
- Customizable verification email — Edit the OTP email subject, heading, and message content to match your brand voice.
- Admin verification management — View and manage email verification statuses for all users from the WordPress Users admin panel. Manually verify or re-send verification emails in bulk.
- Role-based verification skipping — Exclude specific user roles (e.g. administrators, shop managers) from the verification requirement.
- Redirect after verification — Send customers to any page of your choice after successful email verification.
- HPOS Compatible — Fully compatible with WooCommerce High-Performance Order Storage.
Free vs PRO — What’s the Difference?
CEV Free covers registration verification. CEV PRO is a full anti-spam and identity layer for WooCommerce — checkout and guest verification, disposable email blocking, AI risk scoring, SMS OTP, two-factor authentication and a verification analytics dashboard.
CEV Free includes:
- OTP email verification at registration
- Verification popup on the registration form
- Resend OTP option
- Customizable popup design and messages
- Customizable verification email template
- Admin verification management panel
- Role-based verification skipping
- Post-verification redirect
- HPOS compatible
CEV PRO adds:
- Disposable email blocking — Block signups from temporary and throwaway email providers, covering 430+ known domains.
- AI risk scoring — Score every signup from 0 to 100 before it becomes a customer, so risky registrations are caught even when the address looks ordinary.
- AI temp-mail matcher — Catch brand-new disposable domains before public blocklists have caught up with them.
- Bot-cluster detection — Identify coordinated attack patterns across multiple signups rather than judging each one in isolation.
- DNS-based MX record validation — Confirm the email domain has a working mail server before an OTP is ever sent.
- OTP verification at checkout — Require guest users to verify their email before completing a purchase, blocking fake and fraudulent orders at checkout.
- Cart page verification — Optionally trigger email verification from the cart page, before the customer even reaches checkout.
- Phone (SMS) verification — Verify customers with an SMS OTP as an alternative to email verification.
- Two-factor authentication (2FA) — Add Google Authenticator, Authy or Microsoft Authenticator for stronger account security.
- Login authentication — Require OTP verification when a customer logs in from an unrecognized device or browser.
- New device/location detection — Define what counts as an unrecognized login — new device, new browser, new location, or after a set period of inactivity.
- Require OTP at every login — A universal authentication mode for stores that need it.
- B2B allowlist and address blocklist — Allow only specific domains to register, or block specific addresses outright.
- Role-based verification rules — Enforce different verification rules per user role, beyond the simple role skipping in the free version.
- Paid-order gatekeeping — Delay customer activation until their first paid order is completed.
- Smart Form — branded login and registration — Replace WooCommerce’s default forms with fully branded registration and login layouts.
- Verification analytics dashboard — Track signups, verification rates and blocked spam over time.
- Re-engagement reminder emails — Automatically remind unverified customers to finish verifying, at intervals you choose.
- Force re-verify all customers — Flip every verified account back to unverified in one action, after a breach or a list cleanup.
- Automatic database cleanup — A daily cron job removes stale unverified accounts so your user table stays clean.
- OTP length control — Choose between 4-digit and 6-digit OTP codes.
- OTP expiration time — Set how long OTP codes remain valid to balance security and convenience.
- Resend attempt limit — Cap the number of OTP resend requests per session to prevent abuse.
- Advanced email and popup customization — Additional control over OTP email templates and verification popup styling.
- Priority support — Faster, dedicated assistance from the Zorem team.
What It Stops
Email verification is the cheapest defence a WooCommerce store has against junk accounts and junk orders:
- Fake accounts and fake signups — registrations using an address nobody owns or can open. Blocked at registration in the free version.
- Bot registrations and spam signups — automated signups that bloat your user table, skew your customer counts and poison your email list.
- Unverified accounts piling up — see and manage every account’s verification status from the WordPress Users screen, and verify or resend in bulk.
- Disposable and temporary email addresses — throwaway inboxes used to farm coupons and free trials. Blocking 430+ known providers is available in CEV PRO.
- Fake and fraudulent orders, including cash-on-delivery (COD) fraud — verify a guest’s email before the order is placed. Available in CEV PRO.
- Account takeover at login — OTP and two-factor authentication on unrecognized devices. Available in CEV PRO.
Compatible With
Customer Email Verification is built to work smoothly with plugins that follow WooCommerce’s standard registration and checkout templates. The following plugins have been tested and confirmed compatible:
- Checkout builders — Checkout WC, WooCommerce Checkout & Funnel Builder by CartFlows
- Social login — WooCommerce Social Login, Nextend Social Login and Register
- Memberships — WooCommerce Memberships
- Affiliates — Affiliate For WooCommerce
- Store management — Smart Manager, Cashier
- Multilingual — WPML
Documentation & Support
More Plugins by Zorem
- Advanced Shipment Tracking for WooCommerce — The #1 WooCommerce shipment tracking plugin. Trusted by 80,000+ stores.
- SMS for WooCommerce — Automated SMS order and shipping notifications via Twilio, WhatsApp, and 18 other providers.
- Local Pickup PRO — Advanced local pickup with multiple locations, appointment scheduling, and ready-for-pickup notifications.
- Country Based Restrictions PRO — Restrict products and payment gateways by customer country using WooCommerce geolocation.
- Zorem Returns — Self-service returns, exchanges, and store credit management for WooCommerce.
Explore the full catalog at zorem.com →
When a customer enters their email on the WooCommerce registration form and submits, a verification popup appears and a one-time OTP code is sent to their email address. The customer enters the code in the popup. If it matches, their account is created. If they close the popup or enter the wrong code, no account is created. This ensures every registered account has a valid, accessible email address.
The plugin includes a “Resend OTP” option in the verification popup. The customer can click to request a new code. Make sure your WooCommerce store has a reliable transactional email setup (SMTP plugin recommended) to ensure OTP emails are delivered.
Yes. The plugin includes a built-in live preview customizer where you can change the popup colors, text, and messages without writing any code.
Yes. The OTP email subject line, heading, and body content are all editable from the plugin settings. The email is sent via WooCommerce’s email system, so it inherits your store’s email branding (header, logo, footer).
Yes. The role-based skipping feature lets you exclude any user role from the email verification requirement. Administrators, shop managers, and any custom roles can be excluded.
Guest checkout OTP verification — requiring email verification before a guest can complete a purchase — is available in CEV PRO.
Login authentication with OTP verification for unrecognized devices or browsers is available in CEV PRO.
Yes. CEV is compatible with WooCommerce Social Login and Nextend Social Login and Register. See the full compatibility list for details.
Yes. Customer Email Verification is fully compatible with WooCommerce High-Performance Order Storage (custom order tables).
Yes. CEV has been tested with WPML and the plugin strings are translatable.
Yes. From the WordPress Users admin panel, you can select multiple users and use the bulk actions to manually verify their email addresses or resend verification emails.
The OTP step adds one screen to registration, and the popup appears inline without a page reload, so genuine customers usually complete it in a few seconds. What you lose is the registrations that were never going to buy — bots, throwaway addresses and mistyped emails — and what you gain is a customer list where every address actually receives your order emails.
Disposable email blocking, covering 430+ known temporary email providers, is available in CEV PRO, along with an AI temp-mail matcher that catches new throwaway domains before public blocklists update. The free version verifies that the address is real and reachable, but does not maintain a blocklist of providers.
Phone verification with an SMS OTP is available in CEV PRO as an alternative to email verification. The free version verifies by email only.
Yes — with checkout verification in CEV PRO, which requires a guest to verify their email before the order is placed. This is the usual setup for stores offering cash on delivery, where a fake order costs a real delivery. The free version verifies at registration, so it protects account creation rather than guest checkout.
DNS-based MX record validation, which confirms the domain has a working mail server before an OTP is sent, is available in CEV PRO.
Plugin details
Tags on WordPress.org
