Restricting WooCommerce Registrations by Email Domain for Secure Portals 

Summary

Need to lock down access to your WooCommerce portal and protect your WooCommerce store from spam registrations? At Integriti Studio, we implemented a secure WooCommerce registration process that restricts user registration by email domain—helping prevent fake accounts, spam users, and unauthorized access while keeping the WordPress site usable and secure.

This custom WooCommerce registration solution reduces registration spam, blocks spam domains, and ensures only verified email addresses from approved domains can create accounts on your WooCommerce site.

Issue Overview

A private WooCommerce support portal was facing increasing registration spam and privacy concerns. During the WooCommerce registration process, a public registration form displayed a visible company dropdown—exposing the names of all approved partner companies to spammers, bots, and malicious users attempting to create fake user accounts.

This created a risk of spam registrations, fake sign-ups, and potential fraudulent orders in WooCommerce.

The client needed to:

• Hide the list of partners from the public WooCommerce registration form
• Automatically assign users to a company based on their email domain or specific email addresses
• Block email domains that were not authorized
• Prevent spam registrations, fake users, and bot-driven spam attempts
• Allow flexible updates to registration rules directly from the WordPress dashboard

What We Did

🔐 Removed public company selector

The visible company selector was removed from the WooCommerce registration page to avoid exposing internal partner data. This reduced spam attacks, prevented fake registrations, and improved overall WordPress security without relying on a third-party WordPress plugin.

✉️ Email-based validation

We implemented a custom WooCommerce registration validation function that checks the user’s email address during the registration process. The system scans the email domain and compares it against a whitelist of approved domains, helping block spam domains and stop fake accounts before they reach the WordPress database.

🧠 Smart company assignment

When a valid email domain match was found, the user was automatically assigned to the correct partner company. This custom registration flow removed the need for dropdowns, reduced user friction, and kept the WooCommerce registration form clean and private.

⛔ Block unauthorized access

If the email domain didn’t match the approved list, the WooCommerce registration was blocked with a clear error message shown on the registration page:

“Only authorized work email addresses will be approved.”

This approach helps stop WooCommerce registration spam, fake user accounts, spam bots, and unauthorized attempts to create accounts or place orders.

🛠️ Admin-editable messaging

To keep things flexible, the error message and validation rules were made editable via the WordPress admin using the Code Snippets plugin. This allows admins to manage registration features, adjust spam prevention rules, and update messaging without touching core code or installing additional plugins for WordPress.

Final Result

WooCommerce registrations are now secure, automated, and privacy-friendly. Spam registrations, fake sign-ups, and bot-driven attempts are blocked at the registration stage. Authorized users can create accounts smoothly, while spam users are filtered out silently—helping protect your WooCommerce site from spam orders, fraudulent registrations, and malicious activity.

This solution supports ongoing spam prevention, reduces spam effectively, and strengthens the entire WooCommerce registration workflow without CAPTCHA, reCAPTCHA, or extra plugins.