Comment by bryan_w

Let me guess, you think cloudflare is the devil, right?

This is happening because you are basically leaving your PoS system open and unattended while a scammer walks by with a wheelbarrow full of freshly stolen credit cards.

Throw a captcha on that checkout page at least for goodness sakes