Fraud Suite

Fraud Prevention That Actually Enforces

Most fraud apps hand you a risk score and leave the hard part to you. ShipWave Fraud Suite acts: it blocks deterministic fraud patterns at checkout, holds or challenges ambiguous orders, and auto-cancels high-confidence fraud before it ships — every action gated by safety limits and recorded with audit evidence.

5

Enforcement Actions

Monitor, hold, challenge, block, auto-cancel

Free

To Start

100 fraud decisions/month included

Shadow

Mode First

Test every rule before it enforces

100%

Auditable

Evidence package on every decision

Benefits

Why Businesses Choose This Feature

Checkout Blocking for Deterministic Patterns

Publish rules that stop known-bad checkouts before an order ever exists — blocked emails and domains, customer tags, shipping countries, product/SKU groups, and order-total thresholds. Blocks run inside Shopify checkout validation with your own customer-facing message.

Guarded Auto-Cancel After Order Creation

When Shopify risk analysis or your rules flag high-confidence fraud, ShipWave can cancel the order, void the authorization, and restock inventory automatically — but only inside your guardrails: a maximum order amount, live fulfillment checks, and a hard stop once anything has shipped.

Identity & Phone Challenges for Gray-Area Orders

Not every risky order is fraud. Send ambiguous orders a Stripe Identity verification or a Telnyx SMS/call code challenge, then let your configured policy release, hold, or cancel based on the outcome — automatically.

Velocity & Bot-Surge Intelligence

A native Shopify Web Pixel and theme app extension feed session, device, and checkout-attempt signals into privacy-hashed velocity counters. Catch repeated attempts across emails, addresses, devices, and SKUs — and spot traffic surges against your store baseline.

Review Queue with Exportable Evidence

Every decision lands in a filterable review queue with matched rules, normalized signals, provider results, and a full action timeline. Override with one click, mark false positives, and download a PII-minimized evidence package for disputes.

Allowlists That Outrank Every Rule

Trusted customers, domains, and addresses can be allowlisted so broad rules never touch your VIPs. Denylist matches feed a dedicated rule you control like any other — hold, challenge, block, or cancel.

How Fraud Suite Works

1

Start in Shadow Mode

Enable preset rules — Shopify risk cancel, foreign billing + domestic shipping, high-ticket first orders, repeated attempts — in shadow mode. They evaluate every order and record what they would have done, without touching anything.

2

Simulate Against Recent Orders

Run the one-click simulator over your recent orders to see exactly which would have matched, why, and what actions would have fired. Tune thresholds until false positives are gone.

3

Go Live With Guardrails

Flip narrow rules to live: deterministic patterns get checkout blocks, high-confidence fraud gets guarded auto-cancel, gray-area orders get identity or phone challenges. Every action is idempotent, logged, and reversible where Shopify allows it.

Enforcement-First Fraud Protection

Scores Don’t Stop Fraud — Actions Do

Most fraud tools stop at analysis: they score the order and leave the blocking, cancelling, refund-voiding, and inventory cleanup to you. ShipWave already runs your fulfillment — order sync, labels, cancellation, inventory, and returns — so Fraud Suite can safely execute the response, not just recommend one. A high-confidence fraud order can be cancelled on Shopify with reason fraud, its payment authorization voided, and its inventory restocked, automatically, with the entire sequence recorded in an audit log. That difference matters at 2 AM when a card-testing run hits your store.

Deterministic Checkout Blocking, Done Honestly

Fraud Suite publishes your deterministic rules — blocked emails and domains, customer tags, countries, SKU and product groups, and subtotal thresholds — into a Shopify checkout validation function. Blocks evaluate locally inside Shopify with zero network calls at checkout time, so checkout stays fast and blocking keeps working even when third-party services are down. Signals that need live data, like Shopify risk analysis, velocity counters, or provider enrichment, run post-order instead, where they can act with full context. We are equally honest about the limits: no Shopify app can stop every bot pageview before Shopify serves it. Fraud Suite reduces fraudulent checkouts and unsafe fulfillment decisions; it is not a storefront firewall.

Layered Signals: Shopify Risk, Velocity, and Enrichment

Post-order evaluation combines Shopify’s own risk assessment with your customer’s order history, hashed velocity counters (emails, phones, addresses, devices, country pairs, SKUs), storefront session telemetry, and optional enrichment providers: IP and proxy reputation, disposable-email detection, device intelligence (including SEON with your own account), phone reputation via Telnyx, and a built-in freight-forwarder/reshipper address detector. Each signal is a field your rules can use — combine them with all/any/not logic in a visual builder, no code required.

Destructive Actions Are Guarded Like Production Deploys

Auto-cancel is powerful, so it ships wrapped in safety rails: every new rule starts in shadow mode, a simulator previews matches before enablement, a store-level switch and maximum-amount ceiling gate execution, live Shopify state is re-checked immediately before any cancel or capture, and anything with a label, tracking movement, or fulfillment is off-limits. Every action is idempotent — retries can never double-cancel or double-capture — and every decision keeps a PII-minimized evidence trail your team can review or export.

Fraud Suite vs. Score-Only Fraud Apps

FeatureShipWaveScore-Only Apps
OutputEnforced actions with audit logA risk score you act on manually
Checkout blockingDeterministic, in-checkout, no network callsRarely available
Auto-cancelGuarded: amount ceiling, fulfillment checksManual cancellation
Customer challengesStripe Identity + SMS/call verification built inNot included
Safe rolloutShadow mode + recent-order simulatorLive from day one
EvidenceExportable, PII-minimized decision packagesScore history only
Starting priceFree — 100 decisions/monthPer-order fees from day one

What’s in the Fraud Suite

Everything runs per-store with tenant isolation and PII minimization by default.

  • Seeded presets: Shopify risk cancel, foreign billing + domestic shipping, high-ticket first order, repeated attempts, disposable email, reshipper address, bot surge
  • Visual rule builder with all/any/not logic, product groups, and versioned rule history
  • Deterministic checkout blocks with merchant-configured customer messages
  • Guarded auto-cancel: amount ceiling, live fulfillment re-checks, authorization void, restock
  • Stripe Identity and Telnyx SMS/call challenges with configurable post-verification policies
  • Native Shopify Web Pixel + theme app extension for session and checkout telemetry
  • Privacy-hashed velocity counters — raw emails, phones, and addresses are never stored in counters
  • Optional enrichment: IP/proxy, email, device (incl. SEON), and phone reputation adapters
  • Allowlists and denylists with hashed PII entries and expiry
  • Review queue with filters, overrides, false-positive feedback, and evidence export
  • Merchant-controlled data retention windows and GDPR redaction hooks
  • Free plan: 100 decisions/month. Starter $29, Growth $99, Scale $399, Enterprise custom

Built for High-Risk Merchants

High-Ticket Physical Goods

E-bikes, scooters, electronics, and luxury goods attract card-not-present fraud. Block risky patterns on your highest-value SKU groups and require verification before high-ticket first orders ship.

Stores Hit by Card-Testing Runs

Repeated small orders from rotating identities in minutes. Velocity rules on emails, addresses, devices, and checkout attempts catch the run and auto-cancel with authorization voids before fulfillment.

Billing/Shipping Mismatch Patterns

Foreign billing with domestic shipping on high-value orders is a classic reshipper pattern. Combine country-pair rules, the built-in freight-forwarder address detector, and challenges to stop it without blocking legitimate gift orders.

Teams Doing Manual Review Today

Replace the morning spreadsheet triage with a decision queue that already matched the rules, pulled the signals, and planned the action. Review the gray areas; let the clear cases handle themselves.

Merchants Burned by False Positives

Shadow mode, the simulator, allowlist precedence, and one-click overrides mean you can be aggressive on fraud without silently cancelling good customers.

Brands That Need Evidence

When a dispute lands, download the decision’s evidence package — matched rules, signals, provider results, and action history — instead of reconstructing what happened from screenshots.

Frequently Asked Questions

Does Fraud Suite block all bots from my storefront?

No — and be skeptical of any Shopify app that claims it can. Shopify apps do not sit in front of Shopify’s storefront request path, so raw bot pageviews cannot be fully blocked by an app. Fraud Suite uses storefront telemetry to detect surges and repeated attempts, blocks deterministic patterns at checkout, and enforces on orders — which is where fraud actually costs you money.

Will it slow down my checkout?

No. Checkout blocks run as a Shopify validation function evaluating deterministic rule snapshots locally — no network calls to ShipWave or any provider during checkout. Signals that need live lookups run post-order instead.

What happens if a rule cancels a good customer’s order?

That is why every rule starts in shadow mode and why the simulator exists. If a live rule does misfire, the decision queue shows exactly which rule matched and why; you can override the decision, mark it a false positive, and allowlist the customer so broad rules never touch them again. Auto-cancel also respects a maximum amount ceiling you set.

How much does it cost?

The Free plan includes 100 fraud decisions per month with monitoring, shadow rules, and the review queue. Starter ($29/mo) adds checkout blocking and identity challenges with 1,000 decisions. Growth ($99/mo) adds auto-cancel and provider enrichment with 5,000 decisions. Scale ($399/mo) covers 25,000 decisions, and Enterprise is custom. Shopify App Store installs subscribe through Shopify’s own billing.

Does it guarantee I won’t get chargebacks?

No — nobody can honestly guarantee that, and Fraud Suite is not chargeback insurance. It reduces fraudulent orders before fulfillment and preserves decision evidence you can use in disputes. For fighting carrier-side costs, it pairs with ShipWave’s Recovery & Audit Suite.

What customer data does it store?

As little as possible. Emails, phones, addresses, IPs, and device identifiers are normalized and HMAC-hashed before they are used in velocity counters. Provider credentials are encrypted at rest, raw provider payloads follow your retention windows, and Shopify GDPR data-request and redaction webhooks cover all Fraud Suite records.

Which platforms are supported?

Fraud Suite is Shopify-first: it uses Shopify checkout validation, order webhooks, risk assessments, and the Web Pixel. Orders from other channels still flow through ShipWave, but enforcement points like checkout blocking are Shopify-specific today.

Can I bring my own fraud data providers?

Yes. IP, email, device, and phone reputation adapters accept merchant-owned API keys — including SEON device intelligence with your own account and region. Providers are optional; the rules engine, velocity signals, and Shopify risk work without any of them.

Stop Fraud Before It Ships

Start free in shadow mode — see exactly what Fraud Suite would have caught on your last 7 days of orders.