S Shopify Owners NewsletterDaily operational intelligence for Shopify store owners

High-Risk Order Review Checklist for Shopify Owners

Published · Last reviewed

A high-risk order checklist is a short, repeatable set of checks you run on any Shopify order flagged as elevated or high risk before you ship it. It exists so borderline orders get a consistent human decision instead of a guess. The checks — address match, buyer contact, order velocity, and value versus risk — let you confidently ship, hold, or cancel.

When to use this checklist

Run it on any order Shopify marks medium or high risk, any unusually large first-time order, and any order matching a fraud pattern you have seen before. The point is not to review every order — that does not scale — but to give the small share of flagged orders a fair, structured look rather than an emotional snap decision.

The review checklist

Action
Verify the basics: does AVS (billing address) match, did CVV pass, and are billing, shipping, and IP locations consistent?
Why it protects you
Multiple mismatches stacking is the strongest everyday fraud signal.
Verification
You have noted each signal as match or mismatch.
Action
Contact the customer for borderline orders: a quick email or call to confirm the order and details.
Why it protects you
Genuine customers respond and confirm; fraudsters usually go quiet. It is the single most effective manual check.
Verification
You have a response (or non-response) on record before deciding.
Action
Check velocity and history: multiple recent orders or payment attempts from the same person, card, or address?
Why it protects you
Rapid repeat attempts, especially after declines, are a classic card-testing pattern.
Verification
You have looked for related orders or repeated attempts.
Action
Weigh value against risk and decide: ship low-value or well-verified orders, hold to await contact, or cancel clear fraud.
Why it protects you
The cost of being wrong scales with order value; high-value plus high-risk deserves the most scrutiny.
Verification
You have made and logged a ship/hold/cancel decision with a reason.

Make the decision defensible

Whatever you decide, keep a brief note of why. If you ship and it later disputes, your verification notes and any customer contact become part of your chargeback evidence. If you cancel, a record protects you if the customer complains. Documentation turns each review into reusable protection.

How it works

Manual review works because fraud signals are probabilistic, and a human can gather one decisive signal an automated score cannot: direct confirmation from the buyer. The checklist sequences checks from cheapest to strongest. You start with the data already in the order (address, CVV, geography, velocity), and only when those are ambiguous do you spend the effort of contacting the customer — the highest-value check because real buyers confirm and fraudsters disappear.

The final ship/hold/cancel decision is a cost-weighted judgment: how much you lose if this is fraud (largely the order value plus chargeback fee) versus how much you lose if you wrongly cancel a real customer (the sale plus goodwill). Higher value shifts you toward more verification; strong verification shifts you back toward shipping.

Worked example

An order comes in: $480, first-time customer, billing address in one country, shipping to a freight-forwarder in another, placed minutes after two declined attempts. Shopify flags it high risk. The owner runs the checklist: AVS mismatch, CVV passed, IP country differs from billing, and three payment attempts in five minutes — multiple strong signals.

They email the customer to confirm the order and ask for clarification on the shipping address. No reply in 48 hours. Weighing a $480 high-risk order with stacked signals and silence, the owner cancels and refunds, logging the reasons. Had the customer replied and verified, the same checklist would have supported shipping with evidence on file. The structure made a defensible call either way.

Frequently asked questions

When should I manually review a Shopify order?

Review orders Shopify flags as medium or high risk, unusually large first-time orders, and any order matching a known fraud pattern. Reviewing only the flagged minority keeps the process manageable while catching the real risk.

What is the most effective check on a suspicious order?

Contacting the customer directly to confirm the order. Genuine buyers respond and verify details, while fraudsters typically go silent, making it the single strongest manual signal.

What signals suggest a Shopify order is fraudulent?

Mismatched billing address (AVS), failed CVV, billing and shipping in different countries, shipping to a freight forwarder, and multiple rapid payment attempts. Risk rises sharply when several of these stack together.

Should I cancel every high-risk order?

No. A high-risk flag is a prompt to verify, not an automatic cancellation, since some flagged orders are legitimate gifts or international buyers. Decide based on verification and the order's value versus risk.

Why document my order review decisions?

Notes on why you shipped, held, or canceled become evidence if a dispute or complaint follows. Documentation turns each review into protection you can reuse in a chargeback response.