- The buyer fills in their details and picks Cash on delivery. A box appears above Place order.
- They press Send code, or simply press Place order: the code is emailed either way.
- They type the code and place the order. Wrong codes show how many tries are left.
- The order is created and marked Verified, with an order note.
- The next COD order asks for a new code. Codes work only once.
Who skips the code
- Buyers who pick a payment method you do not protect (only Cash on delivery by default).
- Logged in buyers with at least one completed order (can be turned off).
- Buyers on the allow list. Their orders are marked Trusted buyer.
Safety limits, on by default
| Limit | Default |
|---|---|
| Code length | 6 digits |
| Code works for | 10 minutes |
| Wrong tries | 3, then a new code is needed |
| Wait before resending | 60 seconds |
| Codes per email or phone per hour | 5 (IP address: 15) |
SMS: the free plugin emails codes. A developer can send them by SMS with the
wfcv_send_code filter. Built in SMS and WhatsApp gateways are part of Pro.