Opportify Fraud Protection

Start a free trial at app.opportify.ai to get your Private API Key and Public Key. No credit card required. The free trial gives you full API access on live form submissions right away. It is not a sandbox or demo environment.

Yes, it is designed to be a better alternative. Opportify analyzes over 100 signals per submission without presenting any challenge to the visitor. Real users see nothing. Bots and fake submissions are scored and blocked automatically based on your thresholds.

Yes. Both WooCommerce Checkout and WooCommerce Account Registration are supported. You can configure separate risk actions for each so checkout fraud and fake account registrations are handled independently.

No. The JS SDK loads asynchronously from a global CDN with no impact on page rendering. The server-side API call happens during form submission processing and completes in under a second for most submissions.

Yes. The plugin is compatible with WP Rocket, LiteSpeed Cache, W3 Total Cache, Autoptimize, and other major caching plugins. The JS SDK is loaded through the standard WordPress enqueue system and can be managed by your caching plugin using the handle opportify-telemetry. If you change your Public Key, clear your page cache afterward.

When an action is set to Flag, the submission proceeds normally but Opportify stores the risk score, risk level, and contributing factors as metadata attached to the entry. For comments, this goes into comment meta; for users, into user meta; for WooCommerce orders, into order meta. A Risk column appears in the relevant WP Admin list tables so you can review flagged entries.

Flag lets the submission through but records the risk data for your review. Block rejects the submission entirely and shows the visitor your custom block message. Use Flag for Medium risk when you want to review manually, and Block for High and Highest when you are confident in rejecting.

Yes. Copy opportify-config-sample.php to your WordPress root as opportify-config.php. When this file is present, all settings are loaded from it and the WordPress admin UI becomes read-only. This is useful for DevOps workflows, Bedrock and Trellis setups, and multi-environment staging pipelines where you want settings version-controlled.

Yes. Elementor Pro Forms, Ninja Forms, Gravity Forms, WPForms, Fluent Forms, Forminator, Formidable Forms, Contact Form 7, and Mailchimp for WordPress are all supported natively.

Data sent to the Opportify API consists of the email address, IP address, and behavioral signals from the JS SDK, the minimum required for fraud analysis. No personal data is stored by the plugin beyond the risk score and factors in your own WordPress database. Review Opportify's Privacy Policy for full details.

If the API returns an error or is unreachable, the plugin applies the fallback action configured in Settings (default: Allow). By default, submissions are never blocked due to a service disruption. You can change the fallback to Block in Settings if you prefer a stricter posture during outages.

Not by default. The Skip Admins option is enabled by default, which bypasses fraud checks for users with the manage_options capability. You can disable this in Settings if needed.