HELP Someone is using our store to test stolen credit cards

Shopify Plus
1

We are dealing with between 5-10 fraudulent orders per day for no more than $3.00. The offender is placing a small order for in-store pickup. They have no intention of actually picking up the items. They are checking to see whether the stolen credit card # they have is good to use. By using a smaller amount that gets authorized, no flags are raised. Beyond it being a pain, it also messes up our analytics. We are using manual capture so at least we are not paying any fees associated with each transaction.

Shopify suggests enabling a Fraud filter. However, each order the email address being entered is fake and Shopify doesn’t share the IP address of the buyer. We could also raise the minimum for an order but I don’t believe that will fix the issue.

I doubt this is only happening to our store. Has anyone been able to prevent this from occurring again?

All suggestions are appreciated. Thanks!

1 Like
2

If the pattern in the fake emails is obvious you could create a flow to auto cancel those orders based on that email address pattern.

3

You can take a look at this thread https://community.shopify.com/c/technical-q-a/how-can-we-track-a-customer-s-ip-address-to-prevent-order-abuse/m-p/1515756 to find the IP’s address of your Buyer, then block them via IP (using a Shopify app or any other solution)

4

Hello @Michael_DeSatni ,

To prevent small fraudulent orders, try these steps:

  1. Use Shopify Fraud Filters: Set filters to block orders with small amounts, fake emails, or suspicious patterns.
  2. Limit In-Store Pickup: Restrict to verified customers or those with valid details.
  3. Add CAPTCHA/Email Verification: Prevent fake orders by adding CAPTCHA or requiring email verification before checkout.
  4. Enable AVS and CVV: Ensure address and card verification to catch mismatched payment details.
  5. Increase Minimum Order: Test a higher minimum order value to deter small fraudulent orders.
  6. Monitor IPs or Use Anti-Fraud Apps: Block suspicious IP addresses or use apps like Signifyd or FraudBlock for added protection.
  7. Set Alerts for Small Orders: Monitor and review low-value orders manually before capturing.

This multi-layered approach should help reduce fraud and improve your store’s security.