Linux 软件免费装

在这里免费安装WordPress以及其他软件

The Goldens Cards KYC Gate

开发者 mkm1971
更新时间 2026年10月31日 05:06
PHP版本: 7.4 及以上
WordPress版本: 7.1
版权: GPLv2 or later
版权网址: 版权信息

标签

woocommerce checkout fraud prevention identity verification kyc

下载

1.1.2

详情介绍:

The Goldens Cards KYC Gate stops customers from ordering until they have verified their identity with Sumsub. It is built for shops that must prevent fraud, chargebacks and stolen-card purchases. How it works Anti-fraud Admin A Sumsub account is required. This plugin is not affiliated with or endorsed by Sumsub. This plugin is a tool to help reduce fraud. It does not by itself make your store compliant with KYC, AML or data-protection laws; you remain responsible for your own compliance.

安装:

  1. Install and activate the plugin (WooCommerce must be active).
  2. In the Sumsub dashboard, create an App Token and Secret Key (Dev space → App tokens). Grant: Create applicants, Create verification requests, View applicants, View approved applicants, View applicant's personal data.
  3. Create a verification level (Integrations → Applicant levels), for example ID document + liveness selfie, and note its exact name.
  4. Go to WooCommerce → Settings → KYC Gate and enter the App Token, Secret Key and level name. You can instead define SSKYC_APP_TOKEN, SSKYC_SECRET_KEY and SSKYC_WEBHOOK_SECRET in wp-config.php.
  5. In Sumsub (Dev space → Webhooks), add the webhook URL shown on the settings page with the types applicantReviewed, applicantPending, applicantOnHold, applicantReset, applicantDeactivated and applicantActivated, signature SHA256. Copy its secret into "Webhook secret key".
  6. If the Identity verification page returns 404, go to Settings → Permalinks and click Save.
  7. Test with Sumsub sandbox credentials before going live.

升级注意事项:

1.1.2 VPN blocking is now off by default; enable it in WooCommerce → Settings → KYC Gate if you want it.

常见问题:

Can a customer bypass the check by calling the Store API directly?

No. The rule is enforced on the server for classic checkout, block checkout (Store API) and the order-pay page.

Does the plugin stop stolen cards?

It locks the billing name to the verified ID name and can block VPNs. WordPress cannot see the name printed on a card, so also enable 3-D Secure in your payment gateway; the card-holder's bank then confirms the card owner.

My site is behind Cloudflare or a reverse proxy.

Set "Visitor IP source" to CF-Connecting-IP (Cloudflare) or X-Real-IP (Traefik/Coolify/nginx), otherwise every visitor appears to come from the proxy.

What happens to the data when I uninstall?

Settings are deleted. KYC records on users and orders are kept as an audit trail.

Developer hooks

  • sskyc_requires_kyc filter – ( bool $required, int $user_id ).
  • sskyc_status_changed action – ( int $user_id, string $new, string $old, array $context ).
  • sskyc_ip_lookup filter – plug in another IP-intelligence provider.
  • sskyc_fraud_blocked action – fires when an anti-fraud rule blocks a customer.

更新日志:

1.1.2 1.1.1 1.1.0 1.0.2 1.0.0