Fraudulent flag in API order response

[Hari2]

Hi,

We are retrieving orders using Shopify API to send them to our 3PL partner.

Per our business partners, Shopify can flag the order as Fraudulent even after financial_status is marked as "paid".
When an order is flagged as "Fraudulent" by Shopify, does any field in the order API response indicate that this order is fraudulent ?

I went through the fields in API order response, but could not find any information.

Please let us know if anyone dealt with this before.

Thanks,

Hari

[Josh]

Hi Hari, 

When you say 'Fraudulent' are you referring to the 'Risks' section on an order where we sometimes recommend cancelling/investigating further?

Risk information hasn't ever been serialized directly in Orders if my memory serves me correctly, but perhaps the Order Risk API endpoint can help you - for a case such as this one it's the only option available that I'm aware of. 

[Hari2]

Yes. That is the one I was pointing to.

Thanks. I will look into order Risk API to see whethe it serves the need.

[Robin_Burton]

Hi

We have this same problem. We use a 3rd party system to fulfil Shopify orders. We had an order that came it and was marked as "High risk of fraud detected" and the fulfillment status in Shopify is 'Unfulfilled'. However the 3rd party system picked it up through the API as a paid order and it was processed and automatically fulfilled.

It was paid for, but we didn't want it to be fulfilled without looking into the risk first.

Apparently there isn't a way through the API of passing this information on, which seems very strange. Wouldn't it be better for the API to pass on orders to be fulfilled rather ones that are paid? How do we prevent these high risk orders going through automatically?

Thanks

Robin

[Robin_Burton]

Just following up on this in case anyone else comes across the same issue.

Our issue being: orders identified by Shopify as High Risk are marked as Paid but Unfulfilled. The API doesn't seem to have a way of passing details of what orders are High Risk or which are Unfulfilled, just which are Paid. Any Paid orders are automatically processed and fulfilled by our 3rd party fulfillment software meaning High Risk orders were being fulfilled.

The solution we used in the end was a 3rd party service called NoFraud (one of the ones recommended by Shopify support):

https://apps.shopify.com/nofraud-chargeback-prevention-and-protection

Using this app with a configuration change on Shopify means orders are not marked as Paid until being passed by NoFraud. Failed orders are cancelled. Consequently High Risk orders are no longer automatically fulfilled and we have the additional benefit of a more comprehensive Fraud detection system. The downside being a charge on each transaction, however the charge is reasonable and worth it.

I still find it hard to believe that High Risk and Unfufiled orders can't be identified through the API, and perhaps someone will reply with a way to do that, but this workaround seems good and I'm happy to have better screening of our orders anyway!