Paypal Express

Hi,

If you have bots, you want to use security tools to try to block them. For example, using the WAF from AdminTools :
www.akeeba.com/documentation/admin-tools...cation-firewall.html

Now, the point of PayPal Express is to be able to skip your checkout. I can see that you have shipping methods which add their cost to the order once the user provide his address. If the customer skips your checkout with the PayPal Express button, then the shipping fee won't apply to them.
So either:
- you actually don't want to use PayPal Express so that your checkout can't be skipped
- you want to reorganize your checkout so that the cart with the PayPal Express button only appears after the user has provided his address. This will also allow you to add extra anti bot security like extensions.joomla.org/extension/ospam-a-not/ which will help avoid bot registrations, and thus will also avoid the bot going through PayPal Express.