Shopify Fraud Analysis: How to Read Order Signals (2026)

Shopify fraud analysis is the built-in order review in Shopify admin. It shows fraud indicators for an order and, for eligible orders, a Low, Medium, or High risk recommendation for a fraud-related chargeback.

Use it to decide which orders need a second look before you ship:

• Indicators explain what Shopify checked, such as AVS, CVV, and IP details.
• The rating sums up the risk for orders that qualify.
• A missing recommendation means no assessment, not low risk.

{{cta}}

What Is Shopify Fraud Analysis?

Shopify fraud analysis is the process of checking an order's risk before you ship it. That covers address checks, IP and device details, and how the buyer paid. According to Shopify's fraud analysis guide, each order shows its signals and, when the order qualifies, a rating.

Shopify says its ratings come from machine learning trained on past sales across all Shopify stores. Shopify does not publish an accuracy rate or show a numeric fraud score on every order. So treat the recommendation as a starting point for a decision, not the decision itself.

How Shopify Fraud Analysis Works, Step by Step

Fraud analysis runs in the background between checkout and fulfillment. Here is the order of events for a typical online card order.

What Signals Does Shopify's Fraud Analysis Check?

Shopify lists these fraud indicators. Which ones appear depends on the order and the payment method.

• AVS result: whether the billing address matches the address on file with the card issuer. The address verification service result depends on the card issuer. Per Stripe's AVS and CVC documentation, a match is context, not conclusive proof of identity.
• CVV result: whether the customer entered the correct card verification code.
• Location vs payment method: whether the customer's location matches the card.
• Device and network activity: whether the device or network shows unusual patterns, such as an anonymous proxy.
• More than one card tried: a sign of card testing fraud. Stripe's card-testing guidance describes card testing as an automated abuse pattern that needs checkout defenses.
• IP address: shown with a location description, but not a fraud recommendation on its own.

Shopify may group these as high risk signals, low risk signals, and other details. Add your own context during review:

• Billing and shipping distance: the two addresses sit in different cities, states, or countries.
• Order velocity: the same customer, device, or card places several orders in a short window.
• High-risk product categories: electronics, gift cards, and limited drops resell fast. That makes them top targets for card-not-present fraud.
• Customer history: past orders, account age, and recent account changes.

None of these signals is disqualifying by itself. A gift shipped to another address, or an order from hotel Wi-Fi, can trip the same flags as a stolen card.

Distinguish a Recommendation From Its Underlying Signals

For eligible orders, Shopify shows a Low, Medium, or High risk recommendation next to the indicators behind it. Shopify says to read the rating, not count the signals. The signals tell you why the order got that rating.

The fraud analysis Shopify shows for an order can read low, medium, or high. Each Shopify order risk level needs a different amount of review. A Shopify fraud analysis high result needs more work than a Shopify medium fraud analysis result.

A medium fraud analysis Shopify warning is a prompt to check the order, not to cancel it. A Low result means no stronger warning was raised. It does not mean the order is safe.

Which Orders Get a Shopify Fraud Recommendation?

Not every order gets the full analysis, so your Shopify fraud risk view depends on setup. Shopify ties indicators and recommendations to your plan, your gateway, and the order type. Shopify only rates online card orders it can check.

A blocked checkout can be a real customer. If you know the buyer, Shopify suggests creating a draft order and sending an invoice. Blocking good buyers is a false decline, and it costs you the sale.

Worked Example: Two Orders With an Address Mismatch (Illustrative)

This example is made up, with no real order data. Order A has a billing and shipping mismatch. The customer has a long purchase history and no other issue appears. A short check, such as confirming the gift recipient, is usually enough.

Order B has several strong problems at once: failed AVS and CVV checks, an anonymous proxy, and a recent account change. It warrants a hold and a full review before anything ships. Both orders share one signal, but they need very different reviews.

Signal Severity: What Is High Risk, What Needs a Closer Look, and What Is Probably Fine

The table below maps common signal mixes to how fast you should review them. It is editorial triage guidance, not a Shopify rating. For what to do next with Shopify high risk orders, see Chargeflow's dedicated guide.

Watch order speed most of all. Many small, similar tries on one store in a short span is the classic card-testing pattern.

Automate Order Risk Analysis in Shopify With Flow

If you automate part of your review, the Shopify Flow documentation points you to the Order risk analyzed trigger. It fires once fraud analysis is complete, while Order created can run too early. Per Shopify's trigger reference, it runs only for Shopify risk assessments, not third-party ones.

Test Your Fraud Analysis Setup Before You Rely On It

Shopify lets you simulate each risk level, so you can check that tags, holds, and alerts fire as planned. Per Shopify's testing steps:

• Place a test order with a customer email built from shopify.test.high, shopify.test.medium, or shopify.test.low at the shopify.com domain.
• Or enter the same string in the "Apartment, suite, etc." address field.
• Keep the order total above zero.
• Use Shopify Payments in test mode, or a Grow plan or higher with another gateway.

What Shopify Fraud Analysis Cannot See

Fraud analysis scores the order at checkout. Many chargebacks start after delivery, which is outside its view. Shopify also says it does not cover charge reversals made by banks.

The cost of those gaps is growing. Mastercard's chargeback research, citing Datos Insights, puts the global cost of chargebacks at $36.9 billion in 2026, rising to $46.1 billion in 2029. Mastercard also reports that first-party and third-party fraud together make up around 45% of merchant chargeback volume.

Shopify warns that fulfilling high-risk orders without review can result in chargebacks, which may cause payment processing issues or removal from Shopify Payments. See what happens if your Shopify Payments account is suspended. A high dispute rate can also trigger enrollment in Shopify's Network Dispute Resolution Program (NDRP).

What Should You Do With a Flagged Order?

Reading the signals tells you how risky an order looks. It does not tell you whether to fulfill, hold, or cancel it. Treating every Medium or High flag the same way costs you either lost sales or absorbed fraud. Understanding fraud false positives helps you decide how much friction a mixed-signal order deserves.

Name one owner for each flagged-order review. Then a rule never releases a held order while a person still checks it.

To stop a repeat offender, learn how to block fraudulent customers Shopify stores can identify. Keep the indicators, notes, and order history you reviewed. Those records are the same chargeback evidence sources you need if the order is disputed later.

For the immediate review of a flagged order, use the Shopify high-risk order checklist. For the margin, loss and customer-friction calculation, use the order fulfillment decision framework.

To connect the completed assessment to a real hold and release, follow the Shopify pre-fulfillment workflow. The pre-fulfillment chargeback prevention guide explains coverage checks, review ownership and outcome measurement.

Want the Full Prevention Strategy?

This page focuses on reading the signals in front of you. If you are building defenses from scratch, such as checkout rules, account authentication, refund policy, and staff training, start with a broader ecommerce fraud prevention plan that applies beyond Shopify too.

{{cta}}

Shopify's Native Detection Versus Third-Party Tools

Shopify's fraud analysis is built into the order page. It is a fair baseline for Shopify fraud detection and Shopify fraud prevention. Third-party fraud apps from the Shopify App Store show their own indicators and recommendations next to Shopify's on each order.

Protection has limits. Shopify Protect applies to eligible protected Shop Pay orders under its requirements, not to every Shopify order or gateway. Learn how Shopify Protect compares with chargeback apps.

Deciding whether native detection is enough for your order volume? Compare fraud-prevention tools in Chargeflow's breakdown of Shopify's built-in options against third-party apps.

How Chargeflow Fits Into Detection and Recovery

Native payment-risk signals do not predict every later dispute. Some friendly fraud and repeat-abuser patterns can inform a pre-fulfillment review when order, identity and dispute history are available. No score prevents every claim or proves intent. Keep evidence in case the order later results in a chargeback, and use the fraud and abuse classification guide to separate first-party misuse, stolen cards and valid service complaints.

Set up the Chargeflow Shopify connection through the Shopify integration. It covers each stage:

• Prevent scores orders after checkout and before fulfillment, with Proceed, On Hold and Cancel rules. The Prevent workflow guide still marks automated Verify as coming soon; confirm account availability before relying on it.
• Alerts use chargeback prevention alerts to stop up to 90% of chargebacks before they become disputes.
• Automation builds and submits dispute evidence for you, for a 25% success fee only on recovered chargebacks, backed by a 4X ROI guarantee.

Chargeflow has recovered $200M+ for 20K+ merchants. If you accept payments outside Shopify Payments, your payment service provider may handle disputes in its own way, but the same evidence-first approach works.

Foire aux questions

How Does Shopify's Fraud Analysis Work?

Shopify's fraud analysis checks each eligible online card order for signals such as AVS and CVV results, location versus payment method, unusual device or network activity, and more than one card tried. For eligible orders it adds a Low, Medium, or High risk recommendation, based on machine learning trained on transactions across Shopify stores. Merchants check it before they ship.

Does Every Shopify Order Receive a Fraud Recommendation?

Not every Shopify order receives a fraud recommendation. Test, free, gift-card-paid, Point of Sale, B2B, and subscription renewal orders do not get one. Recommendations also need Shopify Payments or a Grow plan or higher. A missing assessment is not the same as low risk.

What Does a "Medium Risk" Order Mean on Shopify?

A Medium risk order on Shopify means the fraud analysis raised some concern, often a single mismatch, but nothing conclusive. Shopify's guidance is "Confirm with the customer before fulfilling." Check the order and contact the customer if needed. Do not cancel it on reflex.

What Does It Mean When Shopify Assessed This Order for Fraudulent Chargeback Risk and Detected a Low Risk Level?

When Shopify assessed this order for fraudulent chargeback risk and detected a low risk level, its guidance is "You can fulfill this order." A Low result means no stronger warning was raised. It does not protect the order from friendly fraud or other disputes after delivery.

What Are the Signs of High Fraud Risk on a Shopify Order?

The signs of high fraud risk on a Shopify order usually stack together: AVS and CVV both failing, a location that does not match the card, an anonymous proxy, or several cards tried in a short window. Shopify marks High risk orders with a warning symbol and suggests verifying, canceling, or refunding them.

Is Shopify's Fraud Indicator the Same as a Fraud Verdict?

A Shopify fraud indicator is an input for review, not a verdict. It does not prove that a payment is unauthorized or that a customer intended fraud, even on a High risk order. Travel, VPN use, and gifts shipped to another address can trigger the same signals, so verify before rejecting a sale.

How Accurate Is Shopify Fraud Detection?

Shopify does not publish an accuracy rate for its fraud detection. Its ratings come from machine learning trained on past sales across Shopify stores. It works best on stolen-card fraud at checkout and cannot see friendly fraud that starts after delivery.

Will Shopify Refund Me if I Get Scammed?

Shopify does not cover charge reversals made by banks in general. Shopify Protect is free and covers eligible Shop Pay orders against fraud and unrecognized chargebacks. For other orders, the merchant carries the loss unless they win the dispute with evidence.

What Should I Do After Shopify Flags an Order?

After Shopify flags an order, review why it was flagged, then decide whether to ship, hold, or cancel it with a clear framework, such as Chargeflow's Shopify fraud and chargeback protection guide. Keep the indicators and notes, since they become dispute evidence if the order is challenged.