Is there a plug-in to automatically disable a customer's account after a certain number of payment failures? My store is undergoing a carding attack. The attacker is using different IP addresses and is using email addresses from gmail, so this seems like the only way to stop it. The attacker is doing this by calling my site's API so captcha is useless here.

1 Answer 1


You can enable the CAPTCHA for the checkout so it will prevent carding via the API. Depending on the Magento version you are on, if it is available I would enable reCAPTCHA v3 as it it basically invisible to the end user unless Google needs to verify they are human.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.