Hi Stella,
Thanks for reaching out. I’m sorry to hear that you are receiving these spam orders.
We can’t really block this person by their email address, and it sounds like they’re changing that often anyway, so we should look for a different way to block them, such as by their IP address.
Do you have a way of looking up the time and date of these purchases? You could use the Live Traffic tool in Wordfence and set a filter for the date and time to track down the visits where these purchases happened.
Once you find them, you can see if they all share the same IP address, which you could block.
I also had a couple of questions that might help us figure out some other options:
1) Is the checkout process happening directly on your website or does TakePayments process these transactions on an external page hosted by them?
2) Can anyone go through checkout without creating an account or is it necessary to create one?
Thanks,
Mau.
