WPCoreTools Disposable Email Guard

WPCoreTools Disposable Email Guard is a free WordPress plugin designed to prevent fake, disposable, and burner email addresses from being used on WordPress and WooCommerce sites. It addresses issues such as fraudulent sign-ups, coupon abuse, and fake checkouts by blocking throwaway email services like Mailinator, 10MinuteMail, Guerrilla Mail, and Yopmail across various entry points including registrations, checkouts, comments, and contact forms. The plugin operates entirely on the user's own server, ensuring that visitor emails never leave the site and maintaining compliance with privacy regulations such as GDPR, CCPA, UK GDPR, LGPD, and PIPEDA. No third-party APIs are used, and there is no need for a data-processing agreement or changes to privacy policies.

The tool comes with five bundled domain blocklists as snapshots, enabling full offline protection from the outset. Two trusted lists are enabled by default, covering about 9,800 known disposable services, with the option to activate three additional sources to surpass 100,000 blocked domains. Users can choose between three modes: blocking fake sign-ups outright, flagging them for review, or logging them silently for analysis. The plugin also offers optional blocking of anonymous email services such as Proton Mail, Tutanota, SimpleLogin, Apple Hide My Email, Firefox Relay, and DuckDuckGo Email, with these features disabled by default. Additional functionality includes a typo and dead-domain catcher to spot suspicious addresses and expired domains, as well as custom block and allow lists with wildcard support for granular control.

WPCoreTools Disposable Email Guard is built to integrate with WooCommerce, protecting checkouts, customer accounts, product reviews, and coupon redemption processes. It can automatically place flagged orders on hold for manual review and refuse coupons when the associated billing email is on a blocklist. The plugin supports popular form plugins, including built-in compatibility with Contact Form 7 and Gravity Forms, and easy integration with WPForms, Elementor Forms, Forminator, and Fluent Forms. Users benefit from a dashboard displaying recent activity, a daily or weekly email digest, and detailed block logs with export to CSV for offline review.

The plugin is licensed under the GPL, is free to use with no paid tiers or upgrades, and requires no account or subscription. Its privacy-friendly, offline-first approach makes it suitable for site owners seeking robust protection against disposable email abuse without sacrificing user privacy.