Trust & Whitelisting
Customer trust scores, IP whitelisting, auto-whitelisting, and device fingerprinting.
Trust and whitelisting
Checkout Security maintains trust scores for customers and can whitelist IP addresses and devices to reduce false positives for legitimate returning buyers.
Customer trust scores
Trust scores range from 0 to 100. Higher scores indicate that Checkout Security considers a customer more trusted. Approved orders increase a customer's score, while rejected or blocked activity decreases it.
When a trust score changes, Checkout Security logs the update internally. You can view trust score history and factors from the admin dashboard.
IP whitelist
Add IP addresses manually from the Checkout Security admin interface when you want trusted traffic from a known address to bypass certain fraud checks.
Checkout Security can also add a customer's IP address automatically after an order is manually approved or auto-approved. The whitelist entry remains active for the configured duration.
When Checkout Security adds an IP address to the whitelist, it records the related order and expiry date. You can review and manage whitelist entries from the admin dashboard.
Whitelisting reduces repeated checks for known customers, but a whitelisted IP can represent more than one person or device. Review manual entries regularly, especially for shared networks, offices, and public connections.
Whitelist duration
The ccp_order_whitelist_duration setting controls how long an IP remains whitelisted after automatic whitelisting.
Duration of an automatically created IP whitelist entry, in seconds. The default is 2592000 seconds, or 30 days.
Checkout Security automatically removes expired entries through the ccp_cleanup_expired_whitelists scheduled event. A shorter duration limits the time that a trusted IP can bypass checks. A longer duration reduces friction for returning customers but increases exposure if the address is later shared or compromised.
The ccp_order_whitelist_duration option is listed in the plugin's uninstall cleanup inventory. If you configure a custom duration, the value persists in the WordPress options table and is removed on uninstall.
Auto-whitelisting reduces friction for returning customers. Review your whitelist duration based on your risk tolerance. Shorter durations are safer but may cause returning customers to face additional checks.
Device fingerprinting
Checkout Security fingerprints devices using behavioral and technical signals. Device trust works alongside customer trust scores and IP whitelisting, so a returning customer can be recognized even when their network address changes.
The checkout can display a Remember this device option that lets customers request device recognition for future visits. Use the following settings to control the option's visibility and initial checkbox state.
Controls whether the Remember this device option appears during checkout. Set to yes to show the option or no to hide it.
Controls whether the Remember this device checkbox is selected by default when it appears. Set to yes to preselect it or no to leave it unchecked.
These options are configurable from Settings → Fraud/Risk. You can show or hide the Remember this device option and control whether the checkbox is selected by default.