Medium Fraud order without any negative parameters

[suitedconnector]

Hello,

I went through archive of forum discussions on orders flagged as medium risk.

I did find the reply by @JoesIdeas in this thread to be quite useful:

https://community.shopify.com/c/payments-shipping-and/what-should-i-do-with-my-first-medium-risk-ord...

However, I haven't seen a discussion of  "medium" risk flagging that has every parameter OK (CCV, Billing address match, 1 payment attempt, shipping addy near placement of order, no proxy, and IP address very near location of shipping of billing and ship addy), and still I get the:

Some characteristics of this order are similar to fraudulent orders observed in the past.

What could those characteristics possibly be?  I don't see Shopify identifying any of them.

 

I did reach out to customer via e-mail and telephone, and did some googling.  I believe all info is legit.  Obviously, it's always a risk (sometimes slight, sometimes less slighlt).  

What am I missing here?  Is this just a random AI thing?  Could it be related to the customer's actual Shopify account?  (Maybe he or she has purchased and returned or contested orders in the past?). Something else I'm missing?

Your thoughts or comments appreciated