Fraud Order Detection

Documentation · IP & Fake Order Blocker

Every order placed on your store is scored for fraud risk and shown in the Orders section of the app, alongside the reasons behind the score.

How the risk score works

Each order gets a score from 0–100, built from a set of explainable signals — not a black box. Signals include things like whether the same identity (email, phone, or shipping address) has been linked to previous cancellations or risk flags, and how quickly repeat orders are coming in from the same identity (velocity). The score comes with the specific reasons that produced it, so you can see why an order was flagged rather than just a number.

Email, phone, and address values used for scoring are hashed before they’re stored — the app never keeps this identifying information in plain text.

Reviewing flagged orders

The Orders list shows every order with its score and can be filtered to just the risky ones. From there you can review the reasons and decide what to do — tag it, hold it, or cancel it — the same way you’d review any other order in Shopify.

Risk-action rules

Under Settings > Risk Actions, you can configure automatic responses that run when an order crosses a risk threshold you set:

Auto-tag — automatically apply a Shopify order tag to flagged orders.
Auto-hold fulfillment — automatically place a fulfillment hold on flagged orders, so they don’t ship before you’ve reviewed them.

Auto-cancel high-risk orders (Enterprise)

Enterprise plans can turn on automatic cancellation for orders above a risk threshold, instead of just tagging or holding them. This is opt-in and off by default.

Customer blocklist

You can add individual customers, email addresses, phone numbers, or addresses to a blocklist, which feeds into the risk score for future orders from a matching identity. Customer-ID blocklist entries specifically are also what powers Checkout Protection on Enterprise plans.