I’m attempting to set up MemberPress on Wordpress to manage memberships for our association. I’m not a pro, but I have reasonable coding experience. Setting up MP with shortcodes, defining groups and rules, styling everything to look right, has all been straightforward.

Now I’m trying to do my research to avoid spam sign-ups and card testing attacks. I have no experience with this, and have no idea of the realistic threat.

What I’ve set up:
- in MP itself, enabled prevent card testing attacks
- minimum membership fee $40 (no free or low memberships)
- Cloudfare Turnstile on all form pages (login, registration)
- Math captcha (kind of simple)
- Using Stripe Checkout, so offsite to complete purchases

Am I missing anything? With Stripe there is a heft chargeback fee, so I really don’t want to face 1000s of fraudulent charges (using real cards). Any other advice? Thanks.