blocking streets , surnames etc etc is i game you cannot win, as i only have to -deliberately – mistype things slightly and your block will not work so you have to forever add things

one option is this
https://www.wp-pizza.com/downloads/wppizza-confirm-reject-notify/
which allows you to reject not-yet-paid orders (among a number of other things like requiring confirmation of a not yet paid order)

simplest thing however is to just not accept cash on delivery or similar orders at all and only accept orders that were prepaid (credit card/paypal or whatever)

unless people use stolen credit cards (not much you can do about that) it will stop fake orders for good as people have paid up front

just a few things on a sunday night (monday morning actually) and in no particular order

– I don’t think it’s that easy for the average user to change their IP address (given that most people these days will have a static ip), so there are plenty of security plugin that let you block by IP to start off with

– >if there would be a mistake in the streets we would call the customer
and that “fake” customer who you just called – as you cannot know that the phonenumber belongs to the person the order is supposed to be delivered to – can simply say : “that’s all great, please deliver”

– furthermore, assuming that you will have had some “no pay” issue with certain addresses, one would think you have a list of those somewhere and if it looks suspicious , you simply pick up the phone (but the above still applies somewhat)

– additionally – as unfortunate as it is – fraud is part of doing business I’m afraid and the police is the right place to really contact in those instances.

– >we got a small percent of customers who are order some pizza and then refuse to take or pay the order
again, that’s for law enforcement to deal with. there’s nothing the plugin can do (but as mentioned, if you were to only accept credit cards, that won’t be an issue, though that’s your/your boss’s decision of course)

– regarding GDPR/Privacy etc : this is pretty much irrelevant here as you are perfectly entitled – in fact, in most cases even required – to collect customer information (called something like “legitimate business interests” ) and the plugin does collect ipaddress, browser parameters etc , regardless (though can be anonymised on request at a later stage)

anyway, I think that’s it from me on the subject for the time being