Docs Customer Email Verification Spam Protection

Spam Protection

Customer Email Verification Pro includes four independent layers of spam protection that run before the OTP is sent — disposable email blocking, MX record validation, a B2B allowlist, and a custom blocked-emails list. Each layer is a separate toggle, so you can enable only the ones you need.

How to Block Disposable / Temporary Emails?

The plugin ships with a built-in list of ~3,000 known disposable email providers (Mailinator, 10MinuteMail, GuerrillaMail, etc.). When this rule is on, sign-ups from any of those domains are rejected before an OTP is sent.

  • Go to Settings → Spam Protection.
  • Enable the toggle Block disposable / temporary emails.
  • (Optional) Add extra domains to Additional blocked domains — one per line.
  • (Optional) Add domains to Excluded domains to whitelist them even if they’re on the built-in list.
  • Customize the rejection message shown to users.
  • Click Save.
Note
The blocklist is checked at signup, classic checkout, Blocks checkout, and edit-account email change.

How to Validate MX Records?

The MX check confirms the email’s domain has a working mail server. This catches typos like @gmial.com, fake domains like @example.test, and dead inboxes — before sending an OTP that would never be delivered.

  • Go to Settings → Spam Protection.
  • Enable the toggle Validate email domain (MX check).
  • Customize the MX rejection message if needed.
  • Click Save.
Note
Results are cached per domain for 24 hours to avoid repeat DNS lookups for repeat sign-ups. The check fails open on DNS errors so transient issues don’t block legitimate users.

How to Restrict Sign-ups to Specific Domains (B2B Mode)?

For B2B / corporate stores that should only accept sign-ups from approved company domains.

  • Go to Settings → Spam Protection.
  • Enable the toggle Restrict signups to specific domains (B2B mode).
  • In Allowed domains, add the domains that are permitted to register — one per line. Wildcards supported (e.g. acme.com, *.partner.com).
  • Customize the Allowlist rejection message.
  • Click Save.
Important
When this toggle is ON, only the listed domains can sign up. Every other domain is rejected, regardless of the disposable/MX rules.
blank

How to Block Specific Email Addresses?

For blocking individual bad actors by their exact email.

  • Go to Settings → Spam Protection.
  • Enable the toggle Block specific email addresses.
  • Add full email addresses to Blocked email addresses — one per line, exact match (no wildcards).
  • Customize the Blocked email rejection message.
  • Click Save.
For domain-level blocking (e.g. block all @spam.com), use the Additional blocked domains field inside the disposable section instead — it supports domain matching.
blank