How to block disposable or specific email domains at Shopify checkout

Short answer: Stop checkouts that use throwaway email domains often linked to fraud, coupon abuse and reseller bots. In Checkpost, choose “Block disposable email domains” from Templates, adjust the values, test it, then save and enable the rule.

The problem

Throwaway email addresses are used for coupon abuse, fake accounts and fraud, and they make order updates undeliverable.

How to set it up

1. Install Checkpost from the Shopify App Store.
2. Open Templates and choose Block disposable email domains.
3. Add or remove domains.
4. Use Try this rule to test a sample cart, then click Save rule.

The rule

Checkout is blocked when all of these conditions is true:

• Email address ends with any of @mailinator.com, @guerrillamail.com, @10minutemail.com, @tempmail.com, @yopmail.com

Shoppers see: “Please use a permanent email address so we can send your order updates.” at the email field, once they reach checkout.

{
  "name": "Disposable emails",
  "match": "all",
  "conditions": [
    {
      "kind": "text",
      "field": "email",
      "op": "ends_with_any",
      "values": [
        "@mailinator.com",
        "@guerrillamail.com",
        "@10minutemail.com",
        "@tempmail.com",
        "@yopmail.com"
      ]
    }
  ],
  "message": "Please use a permanent email address so we can send your order updates.",
  "target": "email",
  "runOn": "checkout"
}

Where this rule works

These are cart and checkout validations, including supported accelerated checkouts. They are current-cart policies; they do not track previous purchases of a SKU. Shopify excludes POS, recurring subscription orders and native pre-order/Try Before You Buy flows from this API. See Shopify's validation compatibility.

Tips

• Include the @ so you match whole domains (@yopmail.com) and not lookalikes.
• Keep the list focused on domains you actually see abused.

FAQ

When is the email checked?

As soon as the shopper enters it at checkout, and the message appears next to the email field.

Can I block a single email address?

Yes. Use "is any of" with the full address.

Related rules

Add block disposable email domains to your store