Stop mailinator.com, yopmail, and 10minutemail at the signup form
Magento's email validation only checks format, not intent — a throwaway inbox that exists for ten minutes passes just as easily as a real one. This module checks the domain against a bundled list of ~400 known disposable providers entirely offline, and blocks the registration before it happens.
One-time license · no monthly fee · 30-day money-back guarantee
Fewer throwaway accounts, fewer fake reviews
One check that runs on every registration, entirely locally, with no external dependency to keep online.
~400 bundled disposable domains
Mailinator, GuerrillaMail, 10MinuteMail, YOPmail, and hundreds of similar providers ship with the module out of the box.
No live network calls, ever
The domain list is checked entirely offline against the module's own data — registration stays fast and never depends on a third-party API being reachable.
Blocks new account registration
A matching domain stops the registration attempt with a clear message — no throwaway account ever gets created in the first place.
Optional guest checkout blocking
Turn on the same check for guest checkout emails if throwaway addresses at order time are a problem for your store too.
Add your own domains
A simple textarea in config lets admins append custom blocked domains on top of the bundled list — no code changes required.
Cuts spam signups and fake reviews
Throwaway addresses are the easiest way to farm fake accounts and reviews. Blocking the inboxes they depend on removes the incentive.
Why this exists: Magento core has no concept of a "disposable" email domain — its validation only confirms an address is RFC-formatted, never whether the inbox behind it is meant to exist for more than ten minutes. Anyone can clear a registration or checkout gate with an address from a temp-mail service built for exactly that purpose. This module solves it with a plain in-memory lookup against a bundled domain list, checked at registration (and optionally checkout) time. Shipping the list with the module instead of calling a live "is this domain disposable" API keeps the check fast and means it can never silently stop working because a third-party service went down or started rate-limiting a check that runs on every single signup. Full walkthrough: How to Stop Fake Signups from Throwaway Email Addresses in Magento 2.
Install & configure
1After purchase, download the module as a .zip from your account dashboard and copy it into app/code/TVTCommerce/DisposableEmailBlocker.
bin/magento module:enable TVTCommerce_DisposableEmailBlocker
bin/magento setup:upgrade
bin/magento cache:flush2Paste your license key under Stores > Configuration > TVTCommerce > Disposable Email Blocker > License.
3Enable the check, decide whether to also block guest checkout, and add any custom domains in the textarea. Save config — it applies immediately.
Buy once. Own it.
One flat price for a single production store — no tiers, no subscription, nothing else in the module is gated.
Single Store
One production Magento domain
one-time
Get Disposable Email Blocker30-day money-back guarantee
Cleaning up account security too?
Disposable Email Blocker keeps junk accounts from being created. TVT Commerce also builds Login Rate Limiter, which throttles credential-stuffing attempts by IP, and Admin Login Alert, which emails you when a backend admin logs in from a new location.