region Blocking

Block by Region or State

Block specific states, provinces, or regions within countries. More precise than country blocking, less broad than IP blocking.

How SecurEcommerce Blocks Regions/States

IP geolocation identifies region/state level location

Why Block by Region?

Region blocking provides more precision than country blocking:

Compliance Requirements

Some products can only be sold in certain states:

  • Age-restricted products
  • Regulated industries
  • Licensing requirements
  • State-specific laws

Fraud Hotspots

Fraud isn’t evenly distributed. Some regions have higher rates:

  • Specific states or provinces
  • Border regions
  • Areas with high identity theft

Shipping Limitations

You might ship nationally but not to:

  • Remote regions with expensive shipping
  • Areas your carriers don’t serve
  • Specific states with regulations

Targeted Attacks

If attacks consistently originate from specific regions, block those areas while keeping the broader country open.

How Region Blocking Works

  1. Visitor connects to your store
  2. IP geolocation determines not just country but region/state
  3. Rules checked against your region blocklist
  4. Action taken based on your configuration

Setting Up Region Blocks

Identify Problem Regions

Review your data for:

  • High fraud rates by region
  • Shipping issues by area
  • Compliance requirements by state

Configure Blocks

In SecurEcommerce:

  1. Select the country
  2. Choose specific regions to block
  3. Set your custom message

Test and Verify

  • Confirm blocks are working
  • Check for unintended impacts
  • Monitor customer feedback

Common Use Cases

US State Restrictions

  • Cannabis-related products: Only certain states
  • Alcohol: State-by-state regulations
  • Firearms accessories: Varying state laws
  • Supplements: Some states have restrictions

Canadian Province Restrictions

  • Quebec language laws: Some products require French
  • Provincial regulations: Varying by province

International Regions

  • EU regions: Different regulations within countries
  • Australian territories: Shipping cost variations
  • Large countries: Target specific problem areas

Region Blocking vs Country Blocking

AspectRegion BlockingCountry Blocking
PrecisionHighLow
ImpactSmallerLarger
Use caseCompliance, targetedBroad restrictions
ManagementMore complexSimpler

Best Practices

Document Your Reasons

For each blocked region, record:

  • Why it’s blocked
  • Legal/compliance basis if applicable
  • Review date

Keep Updated

Regulations change. Review region blocks:

  • When laws change
  • When you update products
  • At regular intervals

Communicate Clearly

Block messages should explain:

  • That access is restricted for their region
  • Why (if appropriate)
  • Alternatives if any exist

Example:

“This product is not available in your state due to local regulations. Please contact us for more information about shipping alternatives.”

Precision and Accuracy

Region-level geolocation is less accurate than country-level:

  • Most visitors are correctly identified
  • Some edge cases near borders
  • Mobile users may show incorrect regions
  • VPN users bypass entirely

Consider this when setting strict compliance-based blocks. For legal requirements, additional verification at checkout may be needed.

Combining with Other Blocking

Region blocking works with:

  • Country blocking: Allow country, block regions
  • VPN blocking: Prevent region bypass
  • IP blocking: Target specific IPs within regions

When Not to Use Region Blocking

  • Speculation: Don’t block regions without data
  • Minor issues: The precision may not be worth the complexity
  • High-value regions: Be careful blocking profitable areas
  • Variable accuracy: Don’t rely solely on region blocking for legal compliance

Related Security Threats

Start Blocking Regions/States in Minutes

SecurEcommerce makes it easy to block unwanted traffic from your Shopify store. Install now and configure blocking in just a few clicks.

★★★★★ 5/5 on Shopify 7-day free trial No credit card required