Charitable Blog

Everything you need to know about Charitable and our team.

Introducing DonationGuard: Real-Time Bot Detection for Charitable Donation Forms

Introducing DonationGuard: Real-Time Bot Detection for Charitable Donation Forms

Last updated on

  • By

If your nonprofit accepts donations online, there’s a problem you may not even know you have: automated bots are constantly targeting donation forms across the web, testing stolen credit card numbers, faking transactions, and running up fees on your payment processor.

It happens quietly, in the background, and most nonprofits only notice when they get hit with chargebacks or strange activity reports.

Charitable Pro 1.8.16 introduces DonationGuard 🛡️, a built-in protection system designed to stop these attacks before they do real damage, without any technical expertise required to use it.

What Is DonationGuard?

Until now, protecting your donation forms meant piecing together separate tools: a spam-blocking challenge here, a submission limiter there, maybe a list of blocked addresses. You had to hope the setup was catching the right things without frustrating real donors in the process.

DonationGuard changes that entirely. It monitors your forms in real time, learns what normal donation activity looks like on your site, and flags coordinated attacks the moment they start.

When it spots something suspicious, it creates an Attack Record, assigns it a priority level based on how serious it is, and presents everything on a single screen so you can review and respond without digging through technical log files.

See it in action below:

How DonationGuard Works

Most bot defenses work by checking one thing: did this request pass a specific test? Experienced bots figure out exactly where that line is and stay just under it. DonationGuard works differently. Instead of relying on a single test, it looks at many signals at once, weighs them together, and calibrates itself to what normal activity looks like on your specific site.

Looks at the whole picture: DonationGuard tracks patterns like how many payments are failing, whether submissions are coming in from many different locations at once, and how fast forms are being submitted. One unusual event will not trigger a false alarm. A coordinated bot attack will.

🎯 Clear priorities, not a flood of noise: Each flagged attack is ranked by how serious it is, so you always know what needs your attention first. And if a wave of bot activity hits at once, you can address all of it in a single click.

🪤 Two silent traps built in: DonationGuard includes two invisible filters that catch basic bots before they can reach your payment processor. Real donors never see or feel them.

Where to Find It in Your Dashboard

DonationGuard lives in two familiar places inside Charitable, so there is no new menu to learn.

⚙️ Settings » Security » DonationGuard: Turn DonationGuard on, choose whether it should automatically block attacks or just record them for your review, and adjust how sensitive the detection is. One click on Apply Recommended Settings gets you a solid starting configuration with no guesswork required.

📋 Tools » Logs » Bot Events: Browse every flagged attack, sort by severity, click into any record to see exactly what triggered it, or clear a whole batch of alerts at once.

📬 Email alerts: When DonationGuard detects something serious, you get a notification with a direct link back to the relevant record so you can act fast.

DonationGuard Will Only Get Better

DonationGuard launches with Charitable Pro 1.8.16, but this is just the start. We’ll keep improving it based on patterns we see in the real world, not just internal testing. The system was built to grow, with new detection rules added over time as threats evolve. The more it’s used, the sharper it gets.

Also New in Charitable Pro 1.8.16

DonationGuard is the headline of the 1.8.16 release, but there’s plenty more in this update worth knowing about.

💳 PayPal Commerce Account Type: Tell PayPal whether you’re a nonprofit or a standard business so it applies the right fees, dispute handling, and reporting. Nonprofits unlock PayPal’s discounted donation fee tier.

📣 PushEngage Integration: Send browser push notifications to donors at key campaign moments, with ready-made message templates and automatic analytics tracking built in. Read the full announcement »

🗺️ Campaigns Map Block: Show one or all of your campaigns on an interactive map, with custom pins, campaign photo popups, and an optional search box so visitors can find campaigns near them.

🌍 Geolocation Upgrades: Choose between Google Maps and OpenStreetMap, follow a guided setup if you use Google, set your preferred distance units, and use free maps with no account or API key required.

✏️ Donor Comments on Offline Donations: Add a donor comment, with an optional Anonymous toggle, when entering or editing a manual donation.

🛡️ Cloudflare Turnstile Hidden Mode: A new option that keeps your spam filter completely invisible to donors unless it’s actually needed, under Settings » Security » Captcha.

On the improvements side, this release also adds WP-Optimize to the list of supported caching plugins, with automatic detection in both the payment gateway health monitor and the Site Health check.

Get Started with DonationGuard

If you are already running Charitable Pro, head to your WordPress dashboard and run the update. DonationGuard starts working automatically once the update is complete. Take a couple of minutes to visit Settings » Security » DonationGuard, click Apply Recommended Settings, and then check Tools » Logs » Bot Events to see what it’s already catching.

Read the DonationGuard Documentation →

Not Yet a Charitable Pro User?

Charitable powers donation forms for more than 1 million nonprofits, churches, schools, and grassroots campaigns. Charitable Pro adds payment gateways, detailed reporting, the full campaign builder, and now DonationGuard, all in one plugin with no per-donation fee taken from your contributions.

Stay Connected for More Nonprofit Resources

For more tutorials and videos tailored to nonprofits, subscribe to our YouTube channel. We regularly publish expert tips, step-by-step guides on online donations, fundraising strategies, and practical resources to help your organization succeed.

🗞️ Get weekly tips and exclusive guides in your inbox
Join our newsletter →  

🎥 Watch step-by-step tutorials and success stories
Subscribe to our YouTube channel →  

👩🏽‍💻 Connect with our community and get daily nonprofit insights
Follow us on LinkedIn →

🥳 Fun reels and non-profit insights
Follow us on Instagram → 

👀 Insightful & fun videos to help you grow your cause
Follow us on TikTok→  

🌎 Subscribe and follow for general fundraiser tips
Get Fundraiser Tips on TikTok → 

Powerful Fundraising Resources

⬇️ Download proven strategies, campaign ideas, and expert tools
Get the Fundraising Kit →  

💸 Get Free Fundraising Resources
Head to the Charitable Fundraising Hub

🤔 Got questions about Charitable?
Charitable FAQs

🏎️ Take Charitable for a spin
Create your Charitable Demo

Understand non-profit terms and jargon
Non-Profit Glossary

% Looking for non-profit deals and discounts?
Best Non-Profit Deals and Discounts →

author avatar
David Bisset Project Manager
David is the project manager of Charitable since 2022. David works with several non-profits (one operated by his wife) along with managing and developing features, support, and marketing for Charitable. Has been with WordPress since 2006 and has been lead organizer of multiple conferences, events, and meetups.

Disclosure: Our content is reader-supported. This means if you click on some of our links, then we may earn a commission. We only recommend products that we believe will add value to our readers.

Leave a Reply

Your email address will not be published. Required fields are marked *

Image

Get free tips and resources right in your inbox, along with 60,000+ others

Join our Newsletter

We won’t spam you. We only send an email when we think it will genuinely help you. Unsubscribe at any time!

Featured Video:

Watch more videos on our YouTube channel.

What's New In Charitable

View The Latest Updates
🔔 Subscribe to get our latest updates
📧 Subscribe to Emails

Email Subscription

Join our Newsletter

We won’t spam you. We only send an email when we think it will genuinely help you. Unsubscribe at any time!

Improvement Payments

📱 Turn Mobile Scrollers Into Donors: Meet Charitable’s Mollie Upgrade

Losing mobile supporters because they hate typing out long card numbers on their phones? Charitable’s updated Mollie integration features:

Image

⚡ One-Tap Wallet Checkout: Enable donors to complete their gifts instantly using Apple Pay or Google Pay with a simple face scan, fingerprint, or tap.

💰 No Extra PCI Burden: Skip complex domain verification and security compliance since all wallet transactions run safely through Mollie’s hosted checkout.

🛠️ Custom Cancel Routing: Keep the experience predictable by automatically sending donors who back out to your cancellation page, or use developer filters to route them to a custom page.

Visit this page to learn more.

author avatar
David Bisset Project Manager
David is the project manager of Charitable since 2022. David works with several non-profits (one operated by his wife) along with managing and developing features, support, and marketing for Charitable. Has been with WordPress since 2006 and has been lead organizer of multiple conferences, events, and meetups.
ambassadors improved New

Moderation and Directory Screens In Ambassadors 3.0

Ambassadors 3.0 has new features: moderation and directory screens… now easily see those who are earning donations on your peer to peer network – including campaign creators that might need to be verified – all in one place. Generate reports, email ambassadors and campaign creators directly and more.

Image

🚀 See when campaign creators and ambassadors have updated their campaigns, what donors/donation they have brought in and more.

🎉 Manually add ambassadors and campaign creators, and approve them in one-click!

Visit this page to learn more.

author avatar
David Bisset Project Manager
David is the project manager of Charitable since 2022. David works with several non-profits (one operated by his wife) along with managing and developing features, support, and marketing for Charitable. Has been with WordPress since 2006 and has been lead organizer of multiple conferences, events, and meetups.
New Payments

⚡ Unlock India-Based Donations: Meet Charitable’s Native Razorpay Integration

Trying to collect donations in India? Charitable’s native Razorpay integration features:

Image

⚡ Instant UPI Integration: Accept fast, local donations directly inside your form via apps like PhonePe, Google Pay, Paytm, and BHIM without sending donors away from your site.

📲 Auto-Generated Campaign QRs: Instantly render scannable QR codes encoding a UPI deep link directly on your public campaign pages and sidebars for an effortless “scan-to-give” experience.

💰 Dual Local & Global Reach: Headline your campaigns in INR while seamlessly accepting major international currencies like USD, EUR, GBP, and CAD to maximize global support.

🔁 Seamless Recurring Giving: Fully integrates with the Charitable Recurring addon to manage automatic monthly subscriptions directly through Razorpay without extra code.

↩️ Automatic Two-Way Sync: Keep your books perfectly clean with two-way refund syncing—issue a refund inside WordPress or your Razorpay dashboard and both sides update automatically.

🔒 Webhook-Verified Security: Automatically protect your donation records using HMAC-signed webhook verification to ensure every status update represents real money cleared on the rails.

Visit this page to learn more.

author avatar
David Bisset Project Manager
David is the project manager of Charitable since 2022. David works with several non-profits (one operated by his wife) along with managing and developing features, support, and marketing for Charitable. Has been with WordPress since 2006 and has been lead organizer of multiple conferences, events, and meetups.
Integration New

🎉 New Built-in PushEngage Integration

Struggling with falling email open rates and rising ad costs just to keep your supporters engaged? Charitable’s built-in PushEngage integration features:

Image

🔔 Zero-Fee Direct Messaging: Deliver crisp, instant pop-up notifications straight to your donors’ desktops and mobile devices.

⏱️ Four Smart Automated Triggers: Automatically send updates for immediate donation thank yous, full-list campaign launches, urgent “ending soon” alerts, and goal milestone celebrations.

📈 Group Momentum Broadcasts: Turn private milestones into public wins by automatically broadcasting alerts to your entire subscriber list the moment a campaign hits 50%, 75%, or 100% of its goal.

📊 Automatic Analytics Tracking: Monitor exactly where your incoming notification traffic is coming from with built-in attribution that requires zero complex configuration.

Visit this page to learn more.

author avatar
David Bisset Project Manager
David is the project manager of Charitable since 2022. David works with several non-profits (one operated by his wife) along with managing and developing features, support, and marketing for Charitable. Has been with WordPress since 2006 and has been lead organizer of multiple conferences, events, and meetups.
New Security

💂‍♂️ New DonationGuard 🛡️ Automatically Protects Your Donations!

Worried about card testing attacks or spam bots flooding your donation forms, but don’t want to ruin the giving experience for your real supporters? Charitable’s DonationGuard features:

🛡️ Real-Time Bot Detection: Actively monitors every donation submission for five distinct attack signals without slowing down your human donors.

📊 Smart Traffic Scoring: Instantly evaluates activity against a learned baseline of your site’s normal donation rhythms to catch sneaky, slow-drip card testing.

🚨 Severity-Tiered Alerts: Immediately opens structured “Attack Records” and notifies you via email and admin alerts the moment a campaign starts taking fire.

🎯 Single-Click Defense: Deploy instant security using the “Recommended Settings” preset to turn on Honeypot, Time Trap, and Rate Limit modules all at once.

🚫 Automated Blocklists: Permanently stop repeat offenders by automatically blocking suspicious email addresses based on your customized rules.

Visit this page to learn more.

author avatar
David Bisset Project Manager
David is the project manager of Charitable since 2022. David works with several non-profits (one operated by his wife) along with managing and developing features, support, and marketing for Charitable. Has been with WordPress since 2006 and has been lead organizer of multiple conferences, events, and meetups.