Fraud Prevention That Actually Enforces
Most fraud apps hand you a risk score and leave the hard part to you. ShipWave Fraud Suite acts: it blocks deterministic fraud patterns at checkout and places durable fulfillment holds on risky orders until a merchant or verified customer clears them, with every action recorded as audit evidence.
4
Rule Actions
Monitor, hold, challenge, block
Free
To Start
100 fraud decisions/month included
Shadow
Mode First
Test every rule before it enforces
100%
Auditable
Evidence package on every decision
Benefits
Why Businesses Choose This Feature
- Checkout Blocking for Deterministic Patterns
Publish rules that stop known-bad checkouts before an order ever exists — blocked emails and domains, customer tags, shipping countries, product/SKU groups, and order-total thresholds. Blocks run inside Shopify checkout validation with your own customer-facing message.
- Durable Holds Across Every Fulfillment Path
When Shopify risk analysis or your rules flag an order, ShipWave records an app-owned Shopify fulfillment hold and blocks labels, batches, picking, supplier shipping, Amazon fulfillment, and manual shipment actions until that specific hold is cleared.
- Identity & Phone Challenges for Gray-Area Orders
Not every risky order is fraud. Send ambiguous orders a Stripe Identity verification or a Telnyx SMS/call code challenge, then let your configured policy release the fraud hold after verification or keep it held for merchant review.
- Velocity & Bot-Surge Intelligence
A native Shopify Web Pixel and theme app extension feed session, device, and checkout-attempt signals into privacy-hashed velocity counters. Catch repeated attempts across emails, addresses, devices, and SKUs — and spot traffic surges against your store baseline.
- Review Queue with Exportable Evidence
Every decision lands in a filterable review queue with matched rules, normalized signals, provider results, and a full action timeline. Override with one click, mark false positives, and download a PII-minimized evidence package for disputes.
- Allowlists That Outrank Every Rule
Trusted customers, domains, and addresses can be allowlisted so broad rules never touch your VIPs. Denylist matches feed a dedicated rule you control like any other: hold, challenge, or block checkout.
How Fraud Suite Works
Start in Shadow Mode
Enable preset rules — Shopify high-risk recommendation, foreign billing + domestic shipping, high-ticket first orders, repeated attempts — in shadow mode. They evaluate every order and record what they would have done, without touching anything.
Simulate Against Recent Orders
Run the one-click simulator over your recent orders to see exactly which would have matched, why, and what actions would have fired. Tune thresholds until false positives are gone.
Go Live With Guardrails
Flip narrow rules to live: deterministic patterns get checkout blocks, risky orders get durable fulfillment holds, and gray-area orders get identity or phone challenges. Every action is idempotent, logged, and explicitly reversible by the merchant.
Enforcement-First Fraud Protection
Scores Don’t Stop Fraud — Actions Do
Most fraud tools stop at analysis: they score the order and leave the operational response to you. ShipWave already runs your fulfillment, so Fraud Suite can place an enforceable hold across labels, batches, picking, external fulfillment, and Shopify fulfillment orders. The merchant keeps the irreversible cancellation decision; ShipWave keeps the risky order from moving while the evidence is reviewed.
Deterministic Checkout Blocking, Done Honestly
Fraud Suite publishes your deterministic rules — blocked emails and domains, customer tags, countries, SKU and product groups, and subtotal thresholds — into a Shopify checkout validation function. Blocks evaluate locally inside Shopify with zero network calls at checkout time, so checkout stays fast and blocking keeps working even when third-party services are down. Signals that need live data, like Shopify risk analysis, velocity counters, or provider enrichment, run post-order instead, where they can act with full context. We are equally honest about the limits: no Shopify app can stop every bot pageview before Shopify serves it. Fraud Suite reduces fraudulent checkouts and unsafe fulfillment decisions; it is not a storefront firewall.
Layered Signals: Shopify Risk, Velocity, and Enrichment
Post-order evaluation combines Shopify’s own risk assessment with your customer’s order history, hashed velocity counters (emails, phones, addresses, devices, country pairs, SKUs), storefront session telemetry, and optional enrichment providers: IP and proxy reputation, disposable-email detection, device intelligence (including SEON with your own account), phone reputation via Telnyx, and a built-in freight-forwarder/reshipper address detector. Each signal is a field your rules can use — combine them with all/any/not logic in a visual builder, no code required.
Irreversible Cancellation Stays With the Merchant
Fraud Suite never automatically cancels an order. Every new rule starts in shadow mode, the simulator previews matches before enablement, app-owned hold IDs are persisted for exact release, and payment capture requires a finalized Fraud Suite approval with no active blocker. Every decision keeps a PII-minimized evidence trail your team can review or export.
Fraud Suite vs. Score-Only Fraud Apps
| Feature | ShipWave | Score-Only Apps |
|---|---|---|
| Output | Enforced actions with audit log | A risk score you act on manually |
| Checkout blocking | Deterministic, in-checkout, no network calls | Rarely available |
| Fulfillment hold | Durable across ShipWave and Shopify paths | Tag or manual workflow |
| Customer challenges | Stripe Identity + SMS/call verification built in | Not included |
| Safe rollout | Shadow mode + recent-order simulator | Live from day one |
| Evidence | Exportable, PII-minimized decision packages | Score history only |
| Starting price | Free — 100 decisions/month | Per-order fees from day one |
What’s in the Fraud Suite
Everything runs per-store with tenant isolation and PII minimization by default.
- Seeded presets: Shopify high-risk hold, foreign billing + domestic shipping, high-ticket first order, repeated attempts, disposable email, reshipper address, bot surge
- Visual rule builder with all/any/not logic, product groups, and versioned rule history
- Deterministic checkout blocks with merchant-configured customer messages
- Durable app-owned fulfillment holds with exact release and enforcement across ShipWave fulfillment paths
- Stripe Identity and Telnyx SMS/call challenges with configurable post-verification policies
- Native Shopify Web Pixel + theme app extension for session and checkout telemetry
- Privacy-hashed velocity counters — raw emails, phones, and addresses are never stored in counters
- Optional enrichment: IP/proxy, email, device (incl. SEON), and phone reputation adapters
- Allowlists and denylists with hashed PII entries and expiry
- Review queue with filters, overrides, false-positive feedback, and evidence export
- Merchant-controlled data retention windows and GDPR redaction hooks
- Free plan: 100 decisions/month. Starter $29, Growth $99, Scale $399, Enterprise custom
Built for High-Risk Merchants
High-Ticket Physical Goods
E-bikes, scooters, electronics, and luxury goods attract card-not-present fraud. Block risky patterns on your highest-value SKU groups and require verification before high-ticket first orders ship.
Stores Hit by Card-Testing Runs
Repeated small orders from rotating identities in minutes. Verified Shopify checkout velocity and anonymous traffic telemetry catch the run, block known patterns at checkout, and hold risky orders before fulfillment.
Billing/Shipping Mismatch Patterns
Foreign billing with domestic shipping on high-value orders is a classic reshipper pattern. Combine country-pair rules, the built-in freight-forwarder address detector, and challenges to stop it without blocking legitimate gift orders.
Teams Doing Manual Review Today
Replace the morning spreadsheet triage with a decision queue that already matched the rules, pulled the signals, and planned the action. Review the gray areas; let the clear cases handle themselves.
Merchants Burned by False Positives
Shadow mode, the simulator, allowlist precedence, and one-click overrides mean you can be aggressive on fraud without silently cancelling good customers.
Brands That Need Evidence
When a dispute lands, download the decision’s evidence package — matched rules, signals, provider results, and action history — instead of reconstructing what happened from screenshots.
Frequently Asked Questions
Does Fraud Suite block all bots from my storefront?
No — and be skeptical of any Shopify app that claims it can. Shopify apps do not sit in front of Shopify’s storefront request path, so raw bot pageviews cannot be fully blocked by an app. Fraud Suite uses storefront telemetry to detect surges and repeated attempts, blocks deterministic patterns at checkout, and enforces on orders — which is where fraud actually costs you money.
Will it slow down my checkout?
No. Checkout blocks run as a Shopify validation function evaluating deterministic rule snapshots locally — no network calls to ShipWave or any provider during checkout. Signals that need live lookups run post-order instead.
What happens if a rule flags a good customer’s order?
The order is held, not cancelled. The decision queue shows exactly which rule matched and why; you can clear the specific fraud hold, mark the decision as a false positive, and allowlist the customer so broad rules do not affect them again.
How much does it cost?
The Free plan includes 100 fraud decisions per month with monitoring, shadow rules, and the review queue. Starter ($29/mo) adds checkout blocking and identity challenges with 1,000 decisions. Growth ($99/mo) adds provider enrichment with 5,000 decisions. Scale ($399/mo) covers 25,000 decisions, and Enterprise is custom. Shopify App Store installs subscribe through Shopify billing.
Does it guarantee I won’t get chargebacks?
No — nobody can honestly guarantee that, and Fraud Suite is not chargeback insurance. It reduces fraudulent orders before fulfillment and preserves decision evidence you can use in disputes. For fighting carrier-side costs, it pairs with ShipWave’s Recovery & Audit Suite.
What customer data does it store?
As little as possible. Emails, phones, addresses, IPs, and device identifiers are normalized and HMAC-hashed before they are used in velocity counters. Provider credentials are encrypted at rest, raw provider payloads follow your retention windows, and Shopify GDPR data-request and redaction webhooks cover all Fraud Suite records.
Which platforms are supported?
Fraud Suite is Shopify-first: it uses Shopify checkout validation, order webhooks, risk assessments, and the Web Pixel. Orders from other channels still flow through ShipWave, but enforcement points like checkout blocking are Shopify-specific today.
Can I bring my own fraud data providers?
Yes. IP, email, device, and phone reputation adapters accept merchant-owned API keys — including SEON device intelligence with your own account and region. Providers are optional; the rules engine, velocity signals, and Shopify risk work without any of them.
Explore More
Related Features
Returns Portal
Self-service returns with disposition rules — including replacement-gated returns that invoice customers who never send the original back.
Learn more →
Automated Claims & Disputes
Recover carrier refunds automatically and generate chargeback rebuttal evidence.
Learn more →
Order Management
Every fraud decision links back to the order timeline your team already works in.
Learn more →
Stop Fraud Before It Ships
Start free in shadow mode — see exactly what Fraud Suite would have caught on your last 7 days of orders.