Description
Registration Email Blocker is a WordPress plugin that restricts which email domains can be used for user registration on your website. The plugin was developed to help Russian website owners partially comply with Federal Law No. 406-FZ regarding user authorization requirements.
How this plugin helps with compliance:
Federal Law 406-FZ requires Russian websites to use specific authorization methods (phone numbers, ESIA, or Russian-controlled systems). While the law does not directly address email-based registration, using foreign email services (gmail.com, yahoo.com, etc.) during registration may contradict the spirit of the law.
This plugin helps in the following ways:
* Prevents registration with foreign email domains (blacklist mode)
* Allows registration only with approved domains (whitelist mode)
* Identifies existing users with non-compliant email addresses
* Sends notifications to users requesting email change
* Provides audit logs of all registration attempts
Important Legal Notice:
This plugin is a technical tool and does not guarantee full compliance with Federal Law 406-FZ. The plugin addresses only the email domain aspect of user registration. Website owners remain responsible for ensuring full legal compliance. We recommend consulting with a lawyer regarding applicable legislation.
The plugin helps eliminate one potential compliance issue but does not replace proper legal authorization systems required by law.
Key Features
- Two Operation Modes: Blacklist (block specific domains) or Whitelist (allow only specific domains)
- Flexible Enforcement: Hard blocking or warning mode
- Existing User Management: Automatically identifies users with non-compliant email addresses
- Bulk Email Notifications: Send email change requests to affected users
- Detailed Logging: Complete history of registration attempts with IP addresses and timestamps
- WooCommerce Integration: Controls email domains during registration and checkout
- Domain Statistics: Analyzes email domains used across all site users
- CSV Export: Export list of users with non-compliant emails
- Pre-configured Domain Lists: Ready-to-use lists of popular foreign and Russian email services
- Administrator Exclusion: Option to exempt administrators from domain checks
Who Needs This Plugin
- Russian website owners required to comply with Federal Law 406-FZ
- Administrators who need to control user registration
- WooCommerce stores operating in Russia with customer email requirements
Technical Details
- Works with standard WordPress registration
- Full WooCommerce compatibility
- Multisite compatible
- Translation ready
- GDPR considerations included
Legal Compliance Notice
Federal Law 406-FZ Compliance:
Federal Law No. 406-FZ (adopted July 26, 2023) establishes requirements for user authorization on Russian websites. The law requires authorization through:
1. Mobile phone numbers
2. ESIA (Unified Identification and Authentication System)
3. Biometric identification system
4. Russian-controlled information systems
This plugin addresses the email domain aspect of user registration by preventing the use of foreign email services and encouraging the use of Russian email providers. However, email-based registration is not explicitly addressed in the law.
What This Plugin Does:
* Prevents registration with foreign email domains (gmail.com, yahoo.com, etc.)
* Allows only approved Russian email domains (mail.ru, yandex.ru, etc.)
* Identifies and notifies existing users with non-compliant emails
* Provides audit logs for compliance verification
What This Plugin Does NOT Do:
* Does not implement phone number authorization
* Does not integrate with ESIA
* Does not provide biometric identification
* Does not guarantee full legal compliance with Federal Law 406-FZ
Responsibility:
Website owners are solely responsible for ensuring full compliance with Federal Law 406-FZ and all applicable legislation. This plugin is a technical tool that may assist with partial compliance but should not be considered a complete legal solution. We strongly recommend consulting with a lawyer regarding your specific compliance requirements.
Support Development
This plugin is completely free and will always remain free. If you find it useful, consider supporting its continued development and maintenance.
Your donation helps with:
* Adding new features based on user requests
* Maintaining compatibility with new WordPress versions
* Providing technical support
* Creating documentation and tutorials
* Ensuring compliance with changing legislation
Even a small contribution helps the development team continue improving this plugin and creating other useful tools for the WordPress community.
Support via: YooKassa (any amount)
All donations are received through registered business entity (IP), ensuring full transparency and legal compliance with Russian tax requirements.
Additional Information
Developer: Altcreative Web Studio
Website: https://altcreative.ru
Support: [email protected]
Recommendations:
* Install an SMTP plugin for reliable email delivery
* Regularly check the “Problem Users” tab
* Maintain backups before making bulk changes
* Test settings in staging environment before deploying to production
* Consult with a lawyer regarding full compliance with Federal Law 406-FZ
System Requirements:
* WordPress 6.0 or higher
* PHP 8.0 or higher
* MySQL 5.7 or higher (or MariaDB 10.2+)
Compatibility:
* WordPress 6.0 – 6.7+
* WooCommerce 7.0+
* Multisite: Yes
* Translation: Ready
Privacy:
* The plugin stores registration attempt logs including email addresses and IP addresses
* All data is stored locally in your WordPress database
* No data is sent to external services
* Logs can be cleared at any time by administrator
License
This plugin is licensed under GPL v2 or later.
Copyright (C) 2026 Altcreative
This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 2 of the License, or (at your option) any later version.
This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
Screenshots
Settings page – operation mode selection, domain lists, notification configuration 
Problem Users – list of users with non-compliant emails, domain statistics 
Logs – history of blocked registration attempts with detailed information and statistics
Installation
Automatic Installation
- Go to Plugins > Add New in WordPress admin panel
- Search for “Registration Email Blocker”
- Click Install and then Activate
Manual Installation
- Upload the plugin folder to
/wp-content/plugins/ - Activate the plugin through the Plugins menu in WordPress
- Go to “Registration Email Blocker” to configure settings
Configuration
- Navigate to “Registration Email Blocker” > “Settings”
- Choose operation mode (blacklist or whitelist)
- Configure domains (pre-configured lists are already provided)
- Set up notification email text for users
- Save settings
Note: Pre-configured domain lists include popular foreign services (gmail.com, yahoo.com, etc.) and Russian services (mail.ru, yandex.ru, etc.). You can modify these lists as needed.
FAQ
-
Does this plugin ensure full compliance with Federal Law 406-FZ?
-
No. Federal Law 406-FZ requires authorization via phone number, ESIA (Unified Identification and Authentication System), or other Russian-controlled systems. This plugin addresses only the email domain portion of registration. It helps prevent registration with foreign email services but does not implement the full authorization requirements of the law. Website owners remain responsible for complete legal compliance.
-
What does the plugin actually control?
-
The plugin controls which email domains users can register with. It can block foreign email domains (like gmail.com, yahoo.com) or allow only approved Russian domains (like mail.ru, yandex.ru). This prevents one potential compliance issue but does not replace proper legal authorization systems.
-
How do I configure the plugin after installation?
-
Go to “Registration Email Blocker” in your WordPress admin. Choose between blacklist mode (block specific domains) or whitelist mode (allow only specific domains). The plugin includes pre-configured domain lists that you can modify. Configure the notification message for users and save your settings.
-
What happens to existing users with non-compliant email addresses?
-
The plugin identifies all existing users with email addresses that don’t meet your domain requirements. You can view these users in the “Problem Users” tab and send them bulk email notifications requesting they change their email address to a compliant domain.
-
Are administrators exempt from these restrictions?
-
By default, yes. Administrators can use any email address. You can change this setting if needed, but it’s recommended to exclude administrators to prevent lockout situations.
-
Does the plugin work with WooCommerce?
-
Yes. The plugin is fully integrated with WooCommerce and validates email domains during both user registration and checkout processes.
-
How can I ensure notification emails are delivered?
-
WordPress uses PHP mail() by default, which often ends up in spam folders. We recommend installing an SMTP plugin (such as WP Mail SMTP or Easy WP SMTP) for reliable email delivery. The plugin logs all notification attempts so you can verify delivery.
-
Can I customize the notification email text?
-
Yes. In plugin settings you can fully customize the email subject and message. Available variables for substitution: {site_name}, {user_name}, {user_email}, {allowed_domains}, {profile_url}.
-
Does the plugin affect site performance?
-
No. The plugin performs validation only during user registration and does not impact normal site operation. Logs are stored in a separate database table with indexes for fast access.
-
Can I export the list of users with non-compliant emails?
-
Yes. The “Problem Users” tab includes an “Export to CSV” button that downloads a list of all users with non-compliant email addresses in CSV format.
-
What happens when I uninstall the plugin?
-
When you delete the plugin, all its data (settings, logs, database tables) will be completely removed. Users remain unchanged, but registration restrictions will no longer be enforced.
-
Does the plugin support subdomains?
-
Yes. If you add “gmail.com” to your list, all subdomains like “mail.gmail.com” will also be blocked automatically.
-
How do I clear the logs?
-
The “Logs” tab includes a “Clear Logs” button that completely removes all log entries from the database. This action is irreversible.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“Registration Email Blocker” is open source software. The following people have contributed to this plugin.
Contributors
Translate “Registration Email Blocker” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.0.0 – 2024-01-05
- Initial release
- Blacklist and whitelist operation modes
- WooCommerce integration
- Existing user management
- Bulk email notifications
- Logging system
- Domain statistics
- CSV export
- Pre-configured domain lists
- Full Russian localization