Why Are My Shopify Orders Flagged as High Risk? Should You Cancel?

Shopify flags an order as high risk when its fraud analysis finds signs that the payment may not come from the real cardholder: a failed address or CVV check, a customer location that does not match the card, unusual device or network activity, or several card attempts before the order went through. The flag is a recommendation, not a verdict. Shopify does not cancel the order for you, and the flag carries no chargeback cover if you ship anyway; only Shopify Protect, on eligible US orders, does that. For a high-risk order, Shopify says you can attempt to verify it, cancel it or refund it. The safest default is to hold fulfillment, contact the customer, and cancel if you cannot confirm the order before you would normally ship.

This guide explains what the flag means, why genuine customers sometimes trigger it, and how to decide whether to cancel, with a worked break-even model. Shopify’s Help Center pages and US pricing were checked on October 23, 2026.

What Shopify’s high-risk flag actually means

Shopify’s fraud analysis has two layers, and they are easy to mix up.

• Fraud indicators are individual details about the order, such as the address verification (AVS) result, whether the CVV was correct, whether the customer’s location matches the payment method, unusual device or network activity, and multiple credit card attempts. Shopify says indicators on their own do not reflect the overall risk of the order.
• Fraud recommendations combine those signals into a risk level of low, medium or high, with guidance that reads “You can fulfill this order,” “Confirm with the customer before fulfilling,” or “Consider canceling this order.” Medium and high-risk orders show a warning symbol on your Orders page.

Not every store sees both layers, and not every order is analysed.

Feature Who gets it Orders it does not cover

Fraud indicators Basic plan or higher Only online credit card orders Shopify can verify are analysed

Fraud recommendations (low, medium, high) Grow plan or higher, or any store using Shopify Payments Test orders, free orders, orders paid fully by gift card, POS orders, B2B orders, subscription renewal orders

Blocked high-risk checkouts Stores using Shopify Payments Blocked attempts never become orders, so there is nothing to cancel

Third-party fraud apps Basic plan or higher Depends on the app

Source: Shopify Help Center, “Reviewing orders with fraud analysis”. Checked October 23, 2026.

So if you are on Basic with a third-party payment provider, you will see the indicators but not a high, medium or low label. If you use Shopify Payments, you get recommendations on any plan.

Why genuine orders get flagged as high risk

The indicators that point to fraud also appear on plenty of honest orders. Shopify’s own fraud prevention page makes this point about mismatched addresses: gifts often ship to a different address than the card’s billing address. Other common innocent causes include:

• A typo in the billing address, which can make the AVS check fail even when the card is the customer’s own.
• A VPN, work network or mobile carrier that places the customer’s IP address far from their real location. Shopify suggests checking whether an IP address belongs to a proxy service or web host.
• Several card attempts because the first card was declined for an ordinary reason, such as a low limit or a bank security check.
• Travel, where a customer buys from abroad with a home-country card.

The reverse is also true. Fraudsters can pass AVS and CVV checks with stolen card details, so a low-risk label is not a guarantee. Shopify notes that the bank that issued the card decides on chargebacks, not Shopify.

Should you cancel a high-risk order? A break-even model

Cancelling a genuine order loses you the profit on that sale. Shipping a fraudulent one loses you the goods, the shipping, the card fee and a chargeback fee. Which mistake costs more depends on your margin, so it helps to know the point where the two expected costs are equal.

This is a hypothetical model, not data from real stores. Assumptions: a $120 order on Shopify Payments, US Basic plan, domestic card at 2.9% + 30¢ (a $3.78 fee), $9 outbound shipping, and the $15 US chargeback fee from Shopify’s chargeback process page. If the order is fraudulent and you ship, we assume the cardholder disputes it and you lose the chargeback, so the $120 is taken back. If you cancel after payment was captured, you refund the $120 and the $3.78 card fee is not returned.

Because the card fee is lost whether you ship or refund, it drops out of the comparison. The break-even fraud chance becomes a simple formula:

Break-even fraud chance = (price – product cost – shipping) ÷ (price + chargeback fee)

If you believe the chance the order is fraud is above that number, cancelling costs less on average. Below it, shipping costs less.

Hypothetical model by E-commerce Partners. Card rate from shopify.com/pricing and the $15 chargeback fee from Shopify’s Help Center, checked October 23, 2026.

Product cost Profit if genuine and shipped Loss if fraud and shipped Break-even fraud chance (refund after capture) Break-even fraud chance (cancel before capture)

$30 (25%) $77.22 $57.78 60.0% 57.2%

$48 (40%) $59.22 $75.78 46.7% 43.9%

$66 (55%) $41.22 $93.78 33.3% 30.5%

$84 (70%) $23.22 $111.78 20.0% 17.2%

Hypothetical $120 order, $9 shipping, $3.78 card fee, $15 chargeback fee. Loss if fraud = product + shipping + card fee + chargeback fee. The last column assumes no card fee when you cancel before capturing payment. Calculated with a formula and checked with a brute-force search in Python; both give the same results.

Three things stand out:

1. Low-margin products leave less room for doubt. At a 70% product cost, cancelling pays off once you think there is about a one-in-five chance of fraud. At 25%, you would need to think the order is more likely fraud than not.
2. Shopify does not publish what probability “high risk” stands for. You cannot plug the label into the formula directly. Use the model to set your own rule, for example “on products above 55% cost, cancel any high-risk order we cannot verify.”
3. The model leaves out costs that push toward caution. Every chargeback counts toward your chargeback rate whether you win or lose, according to Shopify. Our guide to chargeback ratio limits at Visa, Mastercard and Shopify explains why that ratio matters. Staff time on disputes is not counted either.

The cheapest option of all is often a few minutes of verification, which can move your estimate far above or below the break-even line.

How to check a high-risk order before you decide

These steps follow Shopify’s fraud analysis and fraud prevention pages, checked October 23, 2026.

1. From your Shopify admin, go to Orders and open the order.
2. In the Order risk section, click Order risk evaluation or About this order to see which indicators fired. In the Shopify mobile app, open the order and view the order risk summary.
3. Read the indicators, not just the label. A failed AVS check with a matching IP location reads very differently from a proxy IP, a failed CVV and five card attempts.
4. Check the IP location against the shipping and billing addresses. Shopify suggests IP lookup tools and Google Maps for distances, and asking whether the IP belongs to a proxy service.
5. Search the email address and check that the phone number’s area code fits the billing address. Shopify notes fraudsters often use invalid phone numbers.
6. Look for related orders: several orders with different billing names or states shipping to one address is a pattern Shopify calls out.
7. Contact the customer. Shopify suggests calling the number on the order and asking simple questions about the purchase. If a Contact customer action appears in the risk section, it opens an email draft for you; it does not send anything on its own.
8. Do not fulfill while you wait. If the analysis says it is not available yet, Shopify advises waiting, since analysis can take a few minutes.

A customer who answers quickly, confirms details only the cardholder would know and explains the mismatch (a gift, a new address, travel) moves the order toward low risk. No reply before your shipping cut-off is itself a signal.

How to cancel a high-risk order in Shopify

Shopify’s canceling page says that if you suspect an order is fraudulent, you can cancel it to stop staff or fulfillment services from continuing work on it. The steps, checked October 23, 2026:

1. Go to Orders and open the order.
2. Click More actions, then Cancel order.
3. Under Refund payment, choose a refund option. The original payment method is selected by default.
4. Choose a Reason for cancellation.
5. Decide on Restock inventory and Send a notification to the customer. Both are on by default.
6. Click Cancel order.

What it costs you: Shopify states that “Credit card transaction fees aren’t returned to you when you issue a refund,” so a cancelled paid order still loses the card fee. If you use manual capture and the payment was never captured, the payment status changes to Voided instead. Our guide to whether you get fees back when you refund a Shopify order covers those fee rules in full.

Cancelling is not a full shield. Shopify’s fraud prevention page says cancelling or voiding can reduce chargeback risk, but it does not stop the cardholder’s bank from filing a chargeback. If a dispute does arrive, the amount may already be deducted from your payout; Shopify says you can then cancel the order without sending a second refund. Our guide to what happens when a customer files a chargeback on Shopify walks through that process.

Ways to handle high-risk orders before they cost you

Use manual capture for high-value or made-to-order items

With manual capture, customers are not charged at checkout; you capture payment once you have reviewed the order. Shopify sets this under Settings > Payments > Payment capture method > Manually. The catch is the window: Shopify Payments gives a 7-day authorization period by default, and capturing after that adds a 1.75% charge on top of standard card fees. Only use it if you can review every order within a week.

Automate the decision with Shopify Flow

Shopify’s order protection page lists Flow templates in a Risk category, including Cancel and restock high risk orders (which also tags the order and customer and emails staff) and Capture payment if order is not high fraud risk (which needs manual capture switched on). Shopify recommends the Order risk analyzed trigger over Order created, because analysis takes time. An auto-cancel rule suits low-margin products; for higher-margin items, tagging and holding for review is usually the better trade. Our list of Shopify Flow automations worth setting up first shows how to build and test workflows.

Check whether the order is covered by Shopify Protect

Shopify Protect is free chargeback protection for US stores. According to Shopify, it covers fraud-based chargebacks on eligible Shop Pay orders processed through Shopify Payments, including the order cost and chargeback fee. The conditions are strict: the order must contain only shipped physical goods, be fulfilled with valid tracking from a supported carrier within 7 days, and keep its original shipping address, since changing it after checkout voids coverage. Shopify’s Protect pages do not say how coverage interacts with a high-risk label, so check the order’s protection status rather than assuming.

Know why some customers cannot check out at all

Shopify Payments can block some high-risk checkout attempts before an order is created. They appear under Orders > Abandoned checkouts in the Blocked view. If a customer you know is blocked, Shopify suggests creating a draft order and sending an invoice. Repeated attempts can also trigger a temporary IP block, which Shopify says is usually removed within a day and cannot be removed sooner.

Common mistakes with high-risk orders

• Shipping first and checking later. Once a parcel is out, a fraudulent order costs you the goods as well as the money.
• Treating “low risk” as protection. It is an estimate. Only Shopify Protect on an eligible order shifts the chargeback cost away from you.
• Cancelling every flagged order automatically on high-margin products. On the model above, that throws away profit on genuine buyers whenever the true fraud chance is below about 45% to 60%.
• Relying on a third-party gateway’s review status. Shopify warns that a third-party provider’s review may not update in your Shopify admin, so check with the provider directly.
• Ignoring card testing. Many small failed attempts can raise your decline rate for real customers. Shopify’s fraud prevention page covers card testing and repeat fraud separately.

What you should check next

1. Confirm which plan and payment provider you use, so you know whether you get risk levels or only indicators.
2. Work out your own break-even fraud chance with the formula above for your two or three best sellers.
3. Write a one-line rule for staff: which high-risk orders get cancelled, which get a verification email, and the deadline.
4. Look at the last 90 days of medium and high-risk orders and how many became chargebacks, to calibrate your rule.
5. If you are a US store, check how many orders carried Shopify Protect and whether you fulfill within 7 days with tracking.
6. Test the flow with Shopify’s test emails (shopify.test.high@shopify.com and the medium and low versions) with Shopify Payments in test mode.

Frequently asked questions

Does Shopify cancel high-risk orders automatically?

No. Shopify flags the order and recommends an action, but you decide. You can automate cancellation yourself with the Shopify Flow template for high-risk orders. Separately, Shopify Payments may block some high-risk checkouts before they become orders.

What does a medium-risk order mean?

It means Shopify found some signals worth reviewing, and the order shows a warning symbol like a high-risk one. A sensible approach is to check the indicators and confirm with the customer when the order value or your product cost is high.

Will Shopify pay the chargeback if I ship a high-risk order?

Not under fraud analysis. Shopify says the card issuer decides on chargebacks and Shopify does not cover them. The exception is Shopify Protect, which covers eligible fraud-based chargebacks on qualifying Shop Pay orders for US stores.

Can I lower the risk level on an order?

Shopify’s pages do not describe a way to change the risk level. You can verify the customer, record what you found in a staff note and fulfill if you are satisfied.

Why don’t I see any risk level on my orders?

Recommendations need the Grow plan or higher, or Shopify Payments. Some order types never get one, including POS, B2B, gift card, free and subscription renewal orders.

The takeaway

A high-risk flag means “check before you ship,” not “this is fraud.” Read the indicators, contact the customer, and hold fulfillment until you are satisfied. Cancel when you cannot verify, especially on low-margin products, where our model shows a fraud chance as low as one in five already makes cancelling the cheaper bet.

Sources

• Shopify Help Center, “Reviewing orders with fraud analysis” (indicators, recommendations, plan availability, eligible orders, blocked checkouts, admin path, test values, troubleshooting). help.shopify.com
• Shopify Help Center, “Preventing fraud” (warning signs, verification steps, card testing, chargeback rate, cancelling and manual capture). help.shopify.com
• Shopify Help Center, “Canceling orders” (steps, Voided status, suspected fraud, card fees on refunds). help.shopify.com
• Shopify Help Center, “Payment authorization and capture” (manual capture setup, 7-day authorization, 1.75% late capture charge). help.shopify.com
• Shopify Help Center, “Protecting orders with Shopify Flow” (Risk templates, Order risk analyzed trigger). help.shopify.com
• Shopify Help Center, “Overview of the chargeback and inquiry process” ($15 USD chargeback fee, fee returned on a win). help.shopify.com
• Shopify Help Center, “Shopify Protect” and “Considerations for using Shopify Protect” (eligibility, 7-day fulfillment, address changes). help.shopify.com and help.shopify.com
• Shopify, “Shopify Protect” (US stores only, covers order cost and chargeback fee). shopify.com/protect
• Shopify, “Pricing” (US Basic online card rate 2.9% + 30¢). shopify.com/pricing

Last reviewed: October 23, 2026. Plan availability, admin steps, fees and Shopify Protect conditions match Shopify’s Help Center and US pricing page as checked on that date.

How this article was made: researched and drafted with AI assistance, with every factual claim checked against the sources above. The break-even model uses a hypothetical $120 order, product costs and shipping cost, not observed store data, and assumes every shipped fraudulent order ends in a lost chargeback.

Related guides

• What Happens If a Customer Says Their Package Never Arrived?
• What Happens If Shopify Holds Your Payout? How to Get Paid
• Your Store Is Now the Internet’s Top Bot Target