Managing BOPIS Chargebacks: A Merchant Guide

A BOPIS chargeback is a card dispute filed against a "buy online, pick up in store" order, most often triggered by failed identity verification at pickup, an inventory mismatch, or a cardholder disputing an item they already collected in person.

Left unresolved, these disputes drain revenue the same way any other dispute does, so effectively handling chargebacks starts with understanding exactly where BOPIS fulfillment breaks down.

Buy online, pick up in store has moved from a pandemic-era convenience to a mainstream fulfillment channel: 34.2% of U.S. consumers, or roughly 97.2 million people, now use it regularly, and 87% of retailers offer it at checkout (Capital One Shopping Research, 2026).

That scale means understanding the true cost of chargebacks tied to BOPIS orders is no longer optional for any merchant running a hybrid storefront.

{{cta}}

Understanding BOPIS Chargebacks

A chargeback is a reversal of a credit card transaction initiated by the cardholder's bank: it refunds the customer and debits the merchant, often with extra fees on top of the lost revenue.

BOPIS orders create a distinct set of triggers because there is no shipping carrier to confirm delivery, so the entire burden of proof falls on your point-of-sale and pickup records.

The most common causes of BOPIS chargebacks include:

• Inventory mismatches: an item shows as available online but is out of stock in-store, so the order can never be fulfilled as promised.
• Inefficient order fulfillment: staff cannot locate the order quickly, or the customer never receives a ready-for-pickup notification.
• Inaccurate product information: the item that leaves the store does not match the description, images or specifications shown at checkout.
• Weak pickup verification: a fraudster completes a purchase with stolen payment details and collects the order because staff never confirmed the pickup person's identity, producing a legitimate chargeback from the actual cardholder.
• Friendly fraud disputes: a legitimate customer picks up the order in person, then later disputes the charge or claims they never received it. This is a form of friendly fraud, and 62% of merchants say it has increased since last year (Visa, 2025 Global eCommerce Payments & Fraud Report).

The table below maps each trigger to the fastest prevention fix:

BOPIS and the Card-Not-Present Liability Shift

Card networks classify a transaction as card-not-present (CNP) based on how it is authorized, not how it is fulfilled: if the card is never physically presented for examination at checkout, the transaction is CNP even when the customer collects the order in person later.

That means the "buy online" leg of every BOPIS order runs through the same CNP rails as a shipped purchase, and the same liability rules apply to it. That is why card-not-present fraud controls belong on BOPIS checkouts too.

Under standard Visa and Mastercard liability shift rules, a merchant that authenticates the checkout with EMV 3-D Secure generally shifts fraud liability for that transaction to the card issuer.

A merchant that skips 3-D Secure on BOPIS checkouts keeps that liability even if the pickup counter caught nothing wrong, because liability is assigned at authorization, not at pickup. Two adjustments close that gap:

• Run 3-D Secure on BOPIS checkouts, not only on shipped orders. Merchants often route ship-to-home purchases through 3-D Secure while leaving in-store pickup unauthenticated, on the assumption that an in-person handoff is inherently safer. The liability shift, however, is decided before the customer ever reaches the counter.
• Treat the pickup ID check as a second control, not a substitute for authentication. Verifying identity at pickup can stop a fraudster from walking out with the merchandise, but it does nothing to change who is liable for the chargeback if the checkout itself was never authenticated.

BOPIS Fraud Red Flags to Screen Before Pickup

BOPIS fraud usually follows the same playbook: a stolen card, a fast online order, and a pickup before anyone reviews it. Visa’s BOPIS fraud prevention best practices list the signals worth building into your order rules.

Order signals to flag for review:

• Velocity across stores: the same card, billing address, or email placing pickup orders at several locations in a short window.
• Shared contact details: one email or phone number tied to several different cards.
• Risky phone and network data: VoIP or prepaid phone numbers, TOR exit nodes, or an IP address that does not fit the customer’s history.
• Failed attempts first: several declined authorizations right before a successful purchase.
• High-risk baskets: gift cards, electronics, luxury goods, baby formula, and bulk quantities of any of them.
• Loyalty account changes: a recent password reset, lockout, or email change before the order.

Curbside and contactless pickup move faster than a counter handoff, which leaves staff less time to check ID. Apply the same checks there, and tell customers at checkout exactly what ID they need to bring.

Prevention Strategies

Most BOPIS chargebacks are preventable with four operational fixes.

1. Ensure accurate inventory management

Accurate inventory management is the foundation of BOPIS. Sync your online and in-store inventory in real time so customers never buy something you cannot actually hand them, and run regular audits to catch and correct discrepancies before they reach checkout.

2. Streamline order fulfillment

Efficient order fulfillment processes keep the BOPIS experience seamless. Optimize picking and packing, and define clear handoff points between your online and in-store teams so every order is ready before the customer arrives.

3. Provide clear product information and return policies

Publish detailed product descriptions, accurate specifications and high-quality images so customers know exactly what they are buying, and clearly communicate your return policies at checkout and on the pickup receipt so a return never turns into a dispute.

Link every in-store refund to its online order ID. That stops a cancel-after-pickup or refund-plus-chargeback attempt, two common forms of refund abuse on pickup orders.

4. Strengthen pickup security

Require photo ID at pickup and match it to the cardholder name on the order. Layering in ecommerce fraud prevention tools, such as device and IP checks at checkout, catches suspicious BOPIS orders before a fraudster ever reaches the counter.

{{cta}}

Resolving BOPIS Chargebacks

When a BOPIS chargeback does land, how you respond in the first few days determines whether you keep the revenue or lose it twice.

1. Respond within the deadline

Act as soon as you receive the notification. Missing the chargeback time limit your payment processor sets for a response forfeits the case automatically, regardless of how strong your evidence is.

2. Gather compelling evidence

Build a compelling evidence package that proves the order was picked up as promised. At minimum, collect:

• Proof of order fulfillment and pickup: order confirmations, packing slips and signed pickup receipts showing the customer collected the merchandise in person.
• Documentation of communication: emails, text messages or chat logs showing you addressed any concerns the customer raised before the dispute was filed.

The evidence that wins depends on the reason code. Use the Visa chargeback reason codes and Mastercard reason codes on the notice to pick the right proof:

For fraud-coded Visa disputes, Compelling Evidence 3.0 also lets you cite earlier undisputed orders on the same card that share an IP address or device ID. Our guide to omnichannel fraud shows which channel captures each of those data points.

3. Work with your payment service provider and the bank

Keep your payment service provider and the cardholder's bank updated throughout the process, and provide the documentation they request promptly. Your merchant services team can also flag patterns worth escalating.

4. Present a compelling case

Use a proven chargeback response template to structure your rebuttal: state the specific reason for the dispute, then back it with the evidence you collected, following your payment processor's formatting rules exactly.

5. Track your chargeback ratio

Use dispute data to spot recurring failure points, then calculate the applicable network measures separately. Each network counts differently:

• The Visa merchant criteria apply when the acquirer is not itself Above Standard or Excessive. Apply exclusions and check country and regional rules.
• Mastercard identification uses both count and ratio, and fines start in the second month of identification.
• A ratio alone does not establish monitoring, penalties, automatic fees, or account closure. Confirm any assessments and remediation in the actual acquirer notice.

Check the Visa VAMP fact sheet and your acquirer’s applicable notice. For processor implementation and the separate Mastercard reporting periods, see Stripe’s monitoring-program guidance.

6. Automate what you can

Once volume grows past a handful of disputes a month, manually building evidence packages does not scale. Many merchants pair their internal process with a chargeback alert service that flags disputes before they formally post, giving you extra time to resolve the issue directly with the customer instead of fighting a chargeback after the fact.

How Chargeflow Helps With BOPIS Chargebacks

Chargeflow covers three distinct stages of BOPIS chargeback management instead of blending them into one vague pitch:

• Prevent: screens orders for fraud signals before pickup is approved, catching stolen-card and identity-mismatch attempts at the point of sale.
• Alerts: flags a dispute before it becomes a formal chargeback, giving you a window to resolve the issue directly with the customer.
• Automated recovery: compiles pickup receipts, communication logs and order data into a compelling evidence package and submits it on your behalf when a formal chargeback is filed.

The result is fewer BOPIS disputes reaching a formal chargeback in the first place, and a stronger win rate on the ones that do.

Frequently Asked Questions About BOPIS Chargebacks

What is a BOPIS chargeback?

A BOPIS chargeback is a dispute filed against a "buy online, pick up in store" order, typically because the customer says they never received the item, the payment was unauthorized, or the product did not match what was ordered.

The underlying process matches what is a chargeback in general, just without the shipping trail online-only orders can lean on as evidence.

What are the most common reasons for BOPIS chargebacks?

The top causes are inventory that was not actually available at pickup, inefficient fulfillment that leaves customers without a ready order, inaccurate product listings, and weak identity verification at the pickup counter that lets a fraudulent order slip through. Friendly fraud, where a legitimate customer disputes a purchase they already collected, adds a fifth category unique to in-person pickup.

Can merchants win a BOPIS chargeback dispute?

Yes. Merchants regularly win BOPIS chargeback disputes when they can produce a signed pickup receipt, a photo ID match, or communication records showing the order was fulfilled as promised. Cases are far harder to win without documented proof of pickup, since there is no delivery carrier tracking number to fall back on.

How long do merchants have to respond to a BOPIS chargeback?

Response windows are set by the card network and payment processor, not by the merchant, and typically run from a few days to a few weeks from the date the dispute is filed. Missing that deadline forfeits the case automatically, so confirm your specific deadline with your processor as soon as a chargeback notification arrives.

Do merchants get charged fees for BOPIS chargebacks?

Yes. Beyond losing the sale amount, merchants typically pay a chargeback fee per dispute, and a chargeback ratio that climbs too high can trigger card network monitoring programs with additional costs and restrictions.

What does BOPIS mean in retail?

BOPIS stands for buy online, pick up in store. The customer pays on the website or app, and the retailer holds the order for collection at a physical location, often within hours. Curbside pickup, sometimes called BOPAC, is the same model with the handoff at the car instead of the counter.

Will the bank refund a fraudulent BOPIS transaction?

Usually, yes. When a cardholder reports a BOPIS purchase as fraud, the issuing bank typically credits the cardholder and charges the amount back to the merchant. The merchant can keep the funds only by winning the dispute, or by having authenticated the checkout with 3-D Secure so liability shifts to the issuer.

Do chargeback alert networks like Verifi and Ethoca cover BOPIS orders?

Yes. Since the checkout portion of a BOPIS order is a standard card-not-present transaction, it is eligible for the same issuer-side alert networks as any other online purchase. Visa's Verifi network and Mastercard's Ethoca Alerts both notify merchants of confirmed fraud or a filed dispute in near real time, often while the order is still sitting on the pickup shelf.

Acting on that alert to cancel or refund the order before it is collected can stop a BOPIS fraud attempt before it reaches the counter, instead of fighting a chargeback after the merchandise is already gone.

Why Prevention Beats Reactive Chargeback Management

The merchants who keep BOPIS chargeback rates lowest treat pickup verification and evidence logging as a standing part of fulfillment, not a fire drill triggered by a dispute spike. Build the inventory sync, ID checks and evidence habits into your process now, and every future chargeback becomes a quick, well-documented response instead of a scramble.