Fraud Analysis in Shopify: How to Read It
Shopify scores each order for fraud risk before you fulfill it. Here is where the risk level lives, what it means, and what to do next.
The order looks normal. Then a small warning icon appears next to it, and you wonder whether to ship. That icon is Shopify's fraud analysis doing its job. It wants you to look before the box leaves.
What fraud analysis does, and what it doesn't decide
Fraud analysis helps you spot orders that might be fraudulent. You can review them in your Shopify admin before you fulfill them. It works with online credit card orders that Shopify can verify.
It does not decide for you. The recommendation tells you the level of risk on an order. You still choose whether to fulfill, cancel, or check further. And it is a review aid, not a promise. A low-risk order can still go wrong, and a flagged order can still be a real customer.
Where to find the risk level
Open the order in your admin. Open the order details page. The Order risk section shows the risk level, the recommendation, and the indicators. Suspicious orders are flagged with an exclamation mark icon in your order list, so you can spot them quickly.
The check usually runs right away. In rare cases it can take a few minutes, so a brand new order may not show its result the moment you open it.
What the indicators mean
The recommendation shows the risk level. An eligible order can be low, medium, or high risk of a fraud chargeback. The score is built from fraud indicators. Some check the address and the payment. Others look at how the customer, location, device and network behave.
Some indicators are familiar checks. Some indicators check the billing address, called AVS. Others check that the customer gave the correct CVV code. Others look at behavior. One sign looks at place. If the customer's location does not match the payment method, that is a risk indicator.
The scores come from machine learning. It was trained on past sales from all Shopify stores. So the score reflects patterns seen across many merchants, not just your store.
Read the recommendation, not the count
Shopify says to look at the whole recommendation. Do not judge an order by one indicator, or by how many it has. Three weak signals do not always add up to a bad order, and one strong signal does not always sink it. The recommendation weighs them for you.
So do not tally icons like a scorecard. Read the overall level, then look at the listed indicators to understand why the order earned it.
What to do with a high-risk order
Do not fulfill it on autopilot. Shipping high-risk orders can bring more chargebacks. It can even get a store removed from Shopify Payments.
Instead, review the order first. Sometimes the recommendation is to investigate the order. Then a Contact customer action can appear. Use it to reach out before you ship. If something still feels off, you can cancel the order instead of shipping it. For a closer look at the worst case, see Shopify fraud analysis high. For the middle ground, read fraud analysis medium in Shopify.
When Shopify Payments blocks a checkout
Shopify Payments also acts before an order exists. Shopify Payments can block some high-risk checkout attempts before an order is created. When that happens, no payment is captured.
You can review these in the Blocked view of Orders and Abandoned checkouts. Shopify Payments evaluates risk each time the customer submits checkout.
A block is not a wall. If the customer tries again with different payment or billing details, the payment might not be blocked. And if a customer tries to place another order before the block is removed, the timer resets. So a blocked attempt can still turn into a live order later. Keep watching your risk levels.
Gateways, apps, and automation
Fraud indicators and third-party fraud apps work on the Basic plan or higher. Do you use a third-party fraud app? You can see its indicators and recommendations next to fraud analysis, right on the order.
One catch with outside gateways: some third-party gateways don't send review updates back to Shopify. So your admin may show less than the gateway knows.
Do you check orders by hand? Shopify Flow can do some of that work for you. It builds workflows that check each order for signs of fraud.
Testing it on your own store
You do not have to wait for a real suspicious order. You can test fraud analysis on your store and simulate an order with high, medium, or low risk. It is a good way to learn where the results live and what each level looks like.
One limit: test orders don't receive a real fraud recommendation. Use them to learn the layout, not to judge the scoring.
What fraud analysis doesn't cover
Fraud analysis reviews orders and checkouts. It does not stop every problem that walks through your door. Auto-checkout bots during a flash sale are a different problem, covered by Shopify bot protection. Someone breaking into a real customer's account is a different problem. See account takeover fraud prevention.
Your store gives you tools to help you spot and stop fraud. Fraud analysis is one of them. Use it as one part of your routine, and fulfill with your eyes open.