The warnings Shopify puts in front of you
The wording changes with the risk state, but the practical message is the same: slow down and review the order before you treat it like routine fulfillment.
High risk of fraud detected
Before fulfilling this order or capturing payment, please review the fraud analysis and determine if this order is fraudulent.
Chargeback risk is high
Consider canceling this order.
Chargeback risk is medium
Confirm with the customer before fulfilling.
You may also see wording such as “This order has a high risk of fraud” or “This order might be fraudulent.”
What the warning actually means
A fraud warning is a reason to slow down, not proof that the customer is fraudulent. Shopify is telling you that the order has enough risk or uncertainty that it deserves more attention before you capture payment, ship it, or otherwise treat it like a normal order.
Fraud analysis is useful because it gives you a place to start. The warning should change how carefully you handle the order, but it should not replace your own review of the details in front of you.
High risk
Stop routine fulfillment and review the order carefully. If the details do not make sense, do not force the order through just because payment was accepted.
Medium risk
There is enough uncertainty that verification is sensible before you ship. Look for anything that needs an explanation rather than assuming medium means safe.
Fraud analysis
Treat it as context for a decision, not a magic yes-or-no answer. The details of the order still matter.
Before you fulfill, look at the whole order
One strange detail rarely tells the whole story. The useful part of fraud review is looking at how the pieces fit together and deciding whether the order makes sense as a real purchase.
Billing and shipping details
Look for mismatches or information that feels inconsistent with the rest of the order.
IP and location information
Use the location data Shopify gives you as context, especially when it conflicts with the customer or payment details.
Payment attempts
Repeated card attempts, failed payments, or unusual checkout behavior deserve more scrutiny than a clean one-shot purchase.
Customer information
Fake-looking names, unusual contact details, or a customer who cannot explain questionable information can change the picture quickly.
Order pattern
Consider whether the value, quantity, timing, or product mix is normal for your store or unusually aggressive.
Your own context
You know what normal orders look like in your business. Fraud analysis is most useful when you combine it with that experience.
If abandoned checkouts start piling up, look for a pattern
Abandoned checkouts happen on healthy stores, so one by itself does not tell you much. A sudden run of them alongside failed payments, junk customer details, low-value attempts, or repeated high-risk orders is different.
That pattern can be card testing: automated checkout attempts cycling through payment details to find cards that work. At that point, the suspicious order in front of you is only the visible part of the problem. The larger issue is the repeated automated activity reaching checkout.
Reviewing the order does not stop the next attempt
Fraud analysis can help you decide what to do with an order that already exists. Card testing is a different problem. If the attempts keep coming, you need something that changes what can reach checkout in the first place.
If it looks like card testing, the next job is stopping the attempts
Reviewing the order in front of you only handles the order in front of you. If the pattern keeps repeating, you need something that changes what can reach checkout.
Require customer accounts
Shopify can require customers to sign in before checkout. That gives bots another gate to get through, but it also puts that gate in front of every real customer. For many stores, that is a real conversion tradeoff.
Use a third-party protection app
This can preserve a normal checkout for legitimate customers, but different apps protect different parts of the path. Installed and enabled are not the same thing as proven.
Whatever you choose, test what your store actually stops
A protection can look finished from the settings screen and still leave a path open. The only useful answer is what happens when something actually tries to get through.
Our Shopify protection tester follows a product through cart and checkout and shows whether the test is stopped or allowed through, so you can check the setup you already have before changing anything else.
Shopify fraud warning FAQ
What does “High risk of fraud detected” mean in Shopify?
It means Shopify has enough warning signs to tell you the order should not be treated like routine business. Review the order before capture or fulfillment instead of assuming it is safe.
What does “Before fulfilling this order or capturing payment, please review the fraud analysis and determine if this order is fraudulent” mean?
Shopify is telling you to pause normal fulfillment and inspect the order first. The warning is not proof of fraud, but it is a reason to investigate before committing more money or inventory to the order.
What does “Chargeback risk is high. Consider canceling this order” mean?
Shopify is warning that the order carries serious chargeback risk. Review it carefully before fulfillment and do not ignore the warning simply because the payment appears to have gone through.
What does “Chargeback risk is medium. Confirm with the customer before fulfilling” mean?
It means the order has enough uncertainty that customer verification is sensible before fulfillment. Medium risk is not the same thing as an automatic cancellation, but it should not be treated as a clean bill of health either.
What does “This order has a high risk of fraud” mean?
It is another way Shopify can communicate that the order has been flagged as high risk. Treat it as a stop-and-review warning before capture or fulfillment.
What does “This order might be fraudulent” mean?
It means Shopify sees enough uncertainty to tell you the order deserves additional review. It does not prove the customer is fraudulent, but it should change how casually you handle the order.
Should I cancel every Shopify high-risk order?
No single label can make every decision for every store. High risk should trigger a careful review. Whether you ultimately cancel, refund, verify, or fulfill depends on what the order details and your own investigation show.
Why do I keep getting high-risk orders on Shopify?
If the warnings keep repeating, look for a pattern rather than treating every order as an isolated event. Repeated suspicious orders, failed payments, low-value attempts, or abnormal checkout activity can point to ongoing abuse such as card testing.
Can abandoned checkouts be a sign of card testing?
They can be, especially when there is a sudden increase alongside failed payments, repeated low-value attempts, junk customer details, or high-risk orders. Normal shoppers abandon checkout too, so the pattern matters more than any single abandoned checkout.
How can I stop card testing on Shopify?
Merchants commonly consider adding checkout friction such as requiring customer accounts or using a third-party protection app. Both involve tradeoffs, and neither should be assumed to work just because it is enabled. Test the checkout path and verify what your current protection actually stops.