Fraud Shield
How every checkout is scored and decided, what your rules and lists can do, the review queue for held orders, and how to see exactly why an order was held or a buyer was blocked.
Fraud Shield checks every checkout on every path: the storefront cart and checkout, buy buttons and embeds, Discord and Telegram purchases, the public checkout API and wholesale orders. You tune it in Sales → Fraud Shield and Settings → Security & Fraud.
How a checkout is decided
Each checkout is checked twice: before payment, and again after the payment provider confirms it, once card details are known. At each stage the decision is made in this order:
- The ShopFast shared blocklist, if you opted in to it: a match blocks or sends to review, as you chose.
- Your allowlist: a match lets the buyer through, skipping your rules and the score.
- Your blocklist: emails, domains, IPs and ranges, countries, networks (ASNs), devices, Discord IDs and cards.
- Your rules, top to bottom. A rule can allow or block (which ends the run), send to review, ask the buyer for a 6-digit email code or 3D Secure, limit the quantity per line, add a flag, add or take away risk points, or allow only irreversible ways to pay (crypto or store credit). Rules in shadow mode are only traced, so you can see what a new rule would do before it acts.
- The risk score (0 to 100) against your thresholds: review from 40 and block from 80 by default.
A blocked buyer sees your rule’s message or a neutral default, never which rule matched.
What the score is made of
| Signals | Where they come from |
|---|---|
| Network | IP intelligence: VPN, proxy, Tor, hosting and reputation |
| A mail server check and the disposable email list | |
| Velocity | Checkouts at your store in the last hour, day and week, per IP, email, device and card |
| Location | Billing country, IP country and card country, and whether they disagree |
| History | This buyer’s orders, refunds and chargebacks at your store (replacement requests never count as chargebacks) |
| Account | Store accounts: signed in, and how old the account is |
| Cart | The cart against your 90-day average order |
| Card | From the payment provider after payment: BIN, funding, 3D Secure |
| Behaviour | Today’s storefront visit before the checkout |
| Lists | Your lists, and the shared list when you opted in |
| Context | The time of day in your store’s time zone |
The Simulator tab runs any made-up checkout through your current rules, and Checks lists every real one.
Held orders and the review queue
An order is held when a review rule or score caught it, or a payment-stage rule matched. A held order is paid but delivers nothing: no keys, files, roles or download links, and the buyer’s order page says it is under review. It waits in Fraud Shield → Review queue, where you can:
- Approve: delivery starts at once. You can also put the buyer’s email on your allowlist, so they skip review next time.
- Cancel or Refund: you can also add the buyer’s email, IP and device to your blocklist.
Why was this order held?
Every order and customer has a one-click explanation:
- Orders → a held order → Why held? (or Risk check on any other order)
- Customers → a customer → Why blocked? (or Risk check)
It shows, in one sheet:
- The headline, such as “Blocked by your rule “High-value first order” (score 72, blocks at 80)”.
- The score on a scale with your review and block thresholds marked, and a link to change them.
- The trace: every rule that was looked at, with each condition and the buyer’s actual value next to it, and every signal that added points.
- Where each signal came from (the IP intelligence provider, the payment provider, your store’s history…).
- The buyer’s other recent checks, newest first.
- Allow this buyer: put the order’s email, device or IP on your allowlist in one click. Allowed buyers skip your rules and the risk score at checkout (the shared list still applies), and the audit log records who allowed them. When the order has an open review, Open the review takes you there to approve it.
Your role needs Fraud Shield read access to see the explanation and write access to allow a buyer.
Chargeback shield
Fraud Shield → Chargeback shield steers risky checkouts to irreversible ways to pay: a rule with “crypto or store credit only”, a score above your shield threshold, a review verdict, or a new buyer over your card limit. The buyer is asked to pick crypto or store credit instead of a card, with your own neutral line. You can price crypto lower to make the switch easy. When a card dispute does come in, its evidence starts with the risk check and the buyer’s history.
Disputes
What happens to the money when a buyer disputes a payment is in Buyer protection.