My site is being used to screen credit cards via Shopify Payments / How do I report it and am I charged for credit card declines?

[yourcablestore]

I think Shopify payments on my site is being used to screen credit cards.

There are many different email addresses being used the all use the same fake name / address and are all for the same product. However each failed / abandoned checkout (about 47 in the last 24 hours) is trying to charge a different credit card. (Note CVV verification is on.)

Do I report this to Shopify? How do I report this to Shopify? The AI support doesn’t seem to understand / give me a way to actually contact a human.

Also am I being charged for credit card declines? (Help articles seem to indicate I am only being charged for completed payments).

[Maximus3]

Fraudulent orders won't stop

Hi Everyone, [reposting here from another thread on the same topic] Maybe already answered here, but we did build a good (FREE) process to prevent these orders from being processed [ i.e. Payment “Captured ] to avoid the processing fees using the native tools within Shopify, without a 3rd party app. Like most of you, the bots were placing an order for a low value, non-shippable item. In our case, it was our package insurance and the lowest $1.00 option. Here are the steps: Payment Capture …

[yourcablestore]

Thanks that will help if I encounter other fraud issues.

In my case I only sell physical products and the credit card is being denied / no payment is captured. I am pretty sure this means I am not being charged any fees. It is more of an annoyance since it fills the abandoned checkouts section.

I also temporarily made the product they are using inactive so that will stop it for a little but, until they change their script to use a different product.

[Maximus3]

If you can afford it, I would password protect the site for a few days so they move on. There’s no real action Shopify will do (that we’ve seen so far), but you can always file a report to https://www.ic3.gov/

[yourcablestore]

Thanks again.

My primary concern is fees and as long as I am not being charged for the declines and Shopify / the gateway is eating the cost I guess I shouldn’t worry about it

(About 10 years ago I had a similar issue with Chase Paymentech and 3dcart and Chase refunded several thousand in fees a few months after appealing them.)

[LFGabel]

It’s a common problem. This is how I combat it.

Scammer transactions and analytics

Scammers use my Shopify checkout to test their credit card numbers. Dozens per day. My record was over 5,000 in 15 hours. And yet despite that, I see no activity in my analytics, even with the few scam orders that sneak past fraud detection. I won’t be able to stop it, but I might be able to block it if I can determine how they’re getting in. Does anyone have any ideas? With thanks, Lee

[yourcablestore]

I guess I was lucky to not to run into this issue for the first 7 months. I’m trying the Cart Lock app and that seems like it can deter it somewhat until the person running the bot changes something that breaks the rule (or perhaps they will just move on to another Shopify store that doesn’t anything in place yet).

[LFGabel]

I am using a modified flow setup similar to @Maximus3 but instead of Check If node testing for addresses, I use a Run Code node. Some might argue that a Run Code node is more complicated, but I found updating the addresses easier. When you get to a dozen or more addresses, a Check If node gets a little unwieldy. But whatever works for you!

I remain hopeful that the new Shopify fraud detection model that goes online September 26 will help.

[Zachary1]

This may need to further check with credit card provider, rather than Shopify end. But you can always choose to report these fraud behaviours to Shopify end.

[yourcablestore]

Shopify is the credit card provider so there isn’t a seperate provider to report it to.

As for reporting it to shopify how do I do that? The help bot doesn’t seem to understand and wont give me a way to contact a human.