Description
Cash on delivery (in Italian contrassegno) sells a lot, but every fake order or refused parcel costs you shipping, return and time.
SìContrassegno asks customers who pay cash on delivery to confirm their mobile number with a 6-digit SMS code, right inside the checkout, before the order is placed. Real customers confirm in a few seconds; fake numbers and pranksters stop there.
What it does
- SMS code before the order – only for cash on delivery, inside the classic checkout and the Checkout block. The box adapts to your theme and needs no extra scripts or libraries.
- Your own SMS account, no middleman – connect Twilio, Brevo or Skebby. You pay the provider directly, a few cents per SMS. SìContrassegno adds no fees.
- Smart rules – verify every cash on delivery order or only new customers, only above a minimum total, and remember verified registered customers.
- Italian address check – warns when the postcode (CAP) does not match the province or the house number is missing, and can block cash on delivery until it is fixed.
- Refused parcel history – two new order statuses, “Refused on delivery” and “Not collected”, and a pseudonymised history of who refused. It can be rebuilt from your past orders, even if you used another status before.
- Protected credit – limits per phone, IP address and session, a daily SMS cap and a list of accepted countries stop bots from draining your SMS credit. Running out of credit never lets orders through without verification.
- Safe when the provider is down – choose whether to accept orders marked “not verified” or to suspend cash on delivery. Problems that need merchant action have admin email alerts; temporary connection failures are shown in the settings.
- 2-minute setup – a 3-step wizard (provider, test SMS, rules) and a dashboard widget that shows what needs your attention.
- Privacy first – phone numbers, emails and addresses are stored only as keyed hashes, with automatic retention and full support for the WordPress personal data export and erase tools.
- Compatible – WooCommerce High-Performance Order Storage (HPOS), classic and block checkout. English source strings, ready for Italian and other community language packs through Translate WordPress.org.
Premium add-on
The free plugin is complete and works on its own. The optional SìContrassegno Premium add-on, sold separately on damasoft.net, adds:
- risk score from 0 to 100 on every order, with the reasons;
- adaptive checks: customers who already received an order check out without a code, risky ones get more checks;
- automatic blocking of customers who already refused a parcel;
- code and pre-shipping confirmation on WhatsApp;
- online deposit with the payment methods already active in your shop, also without a credit card (for example paysafecard, bought in cash at the tobacconist, or Satispay, when available in your shop), with a step-by-step illustrated guide for the customer, the payment link by SMS and one reminder;
- proof of payment: who pays the deposit by bank transfer attaches the receipt, you confirm with one click;
- manual review of doubtful orders;
- savings dashboard.
More information: DamaSoft SìContrassegno.
External services
To send the verification codes the plugin connects to one SMS provider: the one you choose and configure. Nothing is sent until a provider is configured, and nothing is sent to DamaSoft.
What is sent, and when: when a customer paying cash on delivery asks for a code at checkout, or when you send yourself a test SMS from the settings, the plugin sends the mobile number, the text of the message (which contains the code, your shop name and, if enabled, your domain for automatic code filling) and the sender name, together with your provider credentials for authentication.
Requests to the configured provider also include the plugin name and version and the site’s home URL in the HTTP User-Agent header. This request metadata is sent regardless of whether automatic code filling is enabled; the optional domain line inside the SMS message is a separate feature.
- Twilio – API
https://api.twilio.com/. Terms of Service, Privacy Notice. - Brevo – API
https://api.brevo.com/. Terms of Use, Privacy Policy. - Skebby – API
https://api.skebby.it/. The plugin first logs in with your username and password to obtain a session key, then sends the SMS. Contract terms, Privacy Policy.
The settings page links to the websites of these providers so you can create an account; those links are opened only if you click them.
Screenshots
Installation
- Install and activate the plugin from Plugins > Add New, or upload the zip file.
- The setup wizard opens: choose your SMS provider and paste its credentials (a short guide for each provider is included).
- Send yourself a test SMS.
- Choose when to ask for the code. You can start in test mode: only you and the shop managers are asked for the code.
All settings are in WooCommerce > SìContrassegno.
FAQ
-
Do I have to pay DamaSoft for the SMS?
-
No. SMS are sent with your own Twilio, Brevo or Skebby account and you pay the provider directly. The plugin adds no costs.
-
Which checkout does it support?
-
The classic (shortcode) checkout and the WooCommerce Checkout block. It also works with checkout plugins that keep the standard WooCommerce payment section.
-
What happens if the SMS provider does not answer?
-
You decide: accept the order marked “not verified” (with a note on the order) or suspend cash on delivery until the provider works again. A temporary connection failure is shown in the settings and does not generate an admin email by itself. Email alerts are requested for authentication or sender problems, unavailable credit, country or trial-account restrictions, unreadable stored credentials and the daily SMS cap, at most once per type every 12 hours. Delivery depends on the site’s email configuration. If the credit runs out, orders that need verification are never let through unverified.
-
Are customers asked for the code every time?
-
Not necessarily. You can verify only new customers and remember verified registered customers for a number of days.
-
Can I mark parcels that came back?
-
Yes. Use the “Refused on delivery” and “Not collected” order statuses, one by one or with the bulk actions of the orders list. If you used a different status in the past, map it in the “Refusals” tab and the history is rebuilt from all your orders.
-
Is it GDPR compliant?
-
The refusal history stores only keyed hashes (no phone numbers, emails or addresses in clear text), is deleted after the retention period you choose and is handled by the WordPress personal data export and erase tools. A suggested text for your privacy policy is added to Settings > Privacy.
-
Can I keep the hashing key out of the database?
-
Yes. Add a random string of at least 32 characters to
wp-config.php:define( 'DSSC_HASH_KEY', 'your-long-random-string' );Set it before the history is built, or rebuild the history afterwards from the “Refusals” tab.
-
What if I change the WordPress security keys?
-
The SMS provider credentials are encrypted with a key derived from the WordPress salts. If the salts change, the plugin tells you and you only need to enter the credentials again.
-
Can the SMS show my shop name as sender?
-
Yes, if your provider supports it. In Italy a name used as sender (alias) must first be registered with AGCOM through your SMS provider; until it is registered, use a number as sender, otherwise the codes may not be delivered.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“DamaSoft SìContrassegno” is open source software. The following people have contributed to this plugin.
Contributors
Translate “DamaSoft SìContrassegno” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.0.2
- Hardened administrative permission checks and aligned translation loading with WordPress.org language packs. Existing settings, SMS verification and checkout behaviour are preserved.
1.0.1
- Refined external-service and email-alert documentation, direct Premium links and verified WooCommerce 11.2.1 compatibility. SMS verification and checkout behaviour are unchanged.
1.0.0
- First release: SMS code for cash on delivery in the classic and block checkout, Twilio, Brevo and Skebby, Italian address check, refused parcel statuses and history, anti-abuse limits, setup wizard, dashboard widget, privacy tools.