Choose separately whether to refuse listed temporary-email domains and whether to require a business email at signup. Disposable email and ordinary free webmail are different controls; enabling one does not mean the other should be enabled.

Review the two settings

Block disposable / throwaway email domains checks the email domain against a bundled list. It is enabled by default in the reviewed settings. List-based detection does not establish that every temporary provider will be recognised, or that a recognised domain proves fraud.

Block free email providers (gmail, outlook, …) is stricter and is off by default. It can reject genuine buyers using ordinary webmail. Enable it only if requiring a business email is part of the intended signup flow.

The free-email check applies to new signups rather than refusing a signed-in existing customer merely because their address uses a listed free provider. Do not treat it as a tool for replacing existing customers’ email addresses.

Save the intended controls

1. Open PD Modules → PD Shield → Settings.
2. Review Block disposable / throwaway email domains.
3. Decide separately whether to enable Block free email providers (gmail, outlook, …).
4. Review the intended customer-facing flow and Alert recipient email(s).
5. Press Save settings.

Action when a rule matches governs velocity. Choosing Flag there does not turn these email-domain controls into log-only checks.

Understand signup and order behaviour

The bundled disposable-domain and optional free-provider checks can refuse a signup before an account is created. Do not infer that the free bundled list rechecks and refuses every order from an already-existing account: Blesta’s order path does not provide the same checkout-refusal gate.

Pro adds an optional maintained disposable-domain check during order assessment. An order matched by that Pro check can be held for review when disposable blocking is enabled; it is not a refusal before the order exists. A Pro entitlement alone is not proof that an optional remote check ran or returned a result. Other enabled rules can also affect the outcome.

Diagnose a refused signup

Review PD Shield → Activity for Throwaway email or Free email provider, the action and the time. Identify which setting caused the match before changing a rule. Confirm the domain was entered correctly, without asking the customer to expose passwords or verification links.

If a legitimate domain is unexpectedly refused, compare the matched domain and relevant setting. This workflow does not provide a per-domain exception editor. Keep the person’s full email address and account details out of shared screenshots. Use a controlled signup test through your normal testing process; do not place a live provisioning order merely to test an email-domain rule.

See the PD Shield Blesta guide for related setup, or explore PD Shield.