OrderProof – OTP Order Verification for WooCommerce

Fake Cash on Delivery orders cost you shipping, return fees and stock that sits in a courier van. OrderProof makes every COD customer prove their phone number before you ship: they receive a one-time code on WhatsApp and type it to confirm the order.

No SMS gateway, no per-SMS bills: codes are sent from your own WhatsApp Business number through Meta’s official WhatsApp Cloud API. It works for customers in any country.

How WhatsApp OTP verification works

1. A customer places a Cash on Delivery order.
2. The order waits in “Awaiting WhatsApp verification”. It holds no stock and no “New order” email is sent yet.
3. The customer gets a 6-digit code on WhatsApp and types it on the verification page (with a copy-code button in WhatsApp).
4. The order becomes a real order: stock is reserved and your usual emails go out.
5. Orders that are never verified are cancelled automatically after a few hours.

Test mode lets you try the whole flow before you connect WhatsApp: the code is shown on the verification page instead of being sent.

Free features

• WhatsApp OTP verification for Cash on Delivery orders (WhatsApp Cloud API, no SMS)
• Worldwide phone validation: numbers are read with the calling code of the customer’s billing country
• Duplicate order limit: max X orders per phone number in Y hours
• Blacklist phone numbers, emails and IP addresses, one click from the order page
• Order statuses: “Awaiting WhatsApp verification”, “Awaiting confirmation” and “Delivery refused” (which restocks products)
• One-click WhatsApp confirmation message from the order page ({name}, {items}, {total}, {address}…)
• Customer history on every order: delivered vs refused orders
• Classic checkout and the Checkout block, with or without HPOS
• Translation-ready (French and Arabic translations coming to translate.wordpress.org)

OrderProof Pro

• Smart OTP: skip the WhatsApp code for trusted repeat customers
• Risk score (0–100) on every order, and automatic blocking of high-risk customers
• Auto-blacklist after X refused deliveries
• More WhatsApp templates: shipped, out for delivery…
• Delivery success-rate report

External services

This plugin connects to the WhatsApp Business Platform (Cloud API), operated by Meta Platforms, Inc., to deliver one-time verification codes.

• When: only if you turn on WhatsApp OTP, turn Test mode off and enter your own Cloud API credentials; then each time a Cash on Delivery order needs verification or the customer asks for a new code.
• What is sent: the customer’s phone number, the one-time code, and the name and language of your message template, to https://graph.facebook.com/ with your access token.
• Terms: https://www.whatsapp.com/legal/business-terms
• Privacy policy: https://www.whatsapp.com/legal/privacy-policy

No other data leaves your site, and nothing is sent while WhatsApp OTP is off or in Test mode.