Scammers keep placing orders to 77 greatwood lane!

I am not the first merchant to have this problem. So can someone from Shopify please block this address systemwide ?!

I have around 50 orders already all using different names and credit cards, but going to the same address: 77 greatwood lane Villa Rica GA 30180

Hi @Toy_Sales ,
Contact Shopify Support and provide details of the address and the orders. They can flag the address or investigate patterns of fraudulent activity.
Orders on Shopify have a fraud analysis section that can flag suspicious activity. If an order is “high risk,” you can cancel it before fulfillment.
Apps like NoFraud, Signifyd, or FraudLabs Pro can automatically detect and block high-risk orders. Many of them allow you to block specific addresses, IPs, or patterns.
While Shopify doesn’t allow global address blocks, you could implement a custom checkout script (Shopify Plus only) to reject certain addresses. On non-Plus plans, you’d have to cancel orders manually when they come in.
Thanks
Manoj

I shouldn’t need a Plus plan just to block a known scammer. Shopify should be handling this on their end.

I do appreciate the tips though. thanks

Easy fix: Settings-Payments-Payment Capture Method-Manually

Then I have to manually capture every order as they come in. That’s creating a ton of more work.

Well then Shopify should fix it.

Not a proper solution of course, but you can use Flow to help with these orders.

Flow can start when order is created, check the address and either “cancel order” and “Create order risk assessment” (so that you can later see why) or “capture payment” (if it’s manual capture).

Hello there @Toy_Sales so sorry for the inconvenience you’re facing, I believe the Shopify team is already currently working on something to sort this out. For the time being, your best option would be to use location blockers against the particular area you’re receiving the bots orders from. There are certain apps on the Shopify App Store that can help sort this out.

If the app is free, what’s in it for you? Does the app give the developer access to customer list ?

Hi Everyone,

Maybe already answered here, but we did build a good (FREE) process to prevent these orders from being processed [ i.e. Payment “Captured ] to avoid the processing fees using the native tools within Shopify, without a 3rd party app.

Like most of you, the bots were placing an order for a low value, non-shippable item. In our case, it was our package insurance and the lowest $1.00 option.

Here are the steps:

  1. Payment Capture : go into settings and set payment capture to Manually Capture payments; this is located in Settings > Payments > Payment Capture Method > Manually.
  2. Shopify Flows to Automate Payment Capture : next, you’ll need to go into Flows and set up a flow (or multiple) to automate the payment capture process, as you don’t want to manually click “capture” on every order. The flows you set up will be specific to your store and how this situation is impacting you directly, but I’ll share our flows below, if helpful.
  3. Void Fraudulent Orders : and that’s it, as the orders will still unfortunately keep coming in, but at least you are not incurring the payment processing fees because the payment is not captured, so you’re voiding the order instead of cancelling it. Best we can do for now :slight_smile:

Here are the two flows we set up:

(1) Capture Payment | Order Risk is Low

I’m just going to write it out how it reads, as it is 3 steps. This flow automates the payment capture process for us so that the flow will capture payment for all orders marked as Low Risk, so we do not have to do that manually one-by-one. We were seeing the majority of these scam orders come in as high or medium risk, so this flow solves a lot of them.

Start when…

Order risk analyzed

Then, Check If…

Order risk level is equal to Low

Then, Do this…

Capture Payment

(2) Capture Payment | Address not Associated with Fraud

Start when…

Order created

Then, Check If…

Shipping address city is not equal to Villa Rica

OR

Billing address city is not equal to Villa Rica

OR

Shipping address zip is not equal to 30180

OR

Billing address zip is not equal to 30180

Then, Do this…

Capture Payment

Hopefully that helps some of you, as I know this was super frustrating for us. I’m also no expert, so if there are improvements or modifications, would love to know and comments welcome!

Lastly, like many of you, I’m not impressed with how Shopify is handling this situation and would strongly suggest to @Shopify that they reverse / refund processing fees for the fraudulent orders associated with this address — and the two others, one in Toronto and another in the UK — that connects specifically to this fraud scheme. It’s their job to catch and mitigate this stuff, not ours.

At a bare minimum, I’d like to see them send out an email to all merchants providing guidance on to do something like what I’ve outlined above. When I spoke with their customer reps, they were not helpful and it was nothing but template answer

@Shopify you can do better, come on.

Dont waste your time. I get at least 100 fake orders a week. I have reported them, talked to support, etc. they won’t do anything. they even tell me to buy some app to “maybe” help block hackers. I should not have to pay for an app, shopify for have a better system to monitor 100s of abandoned carts clearly using fake info. but they won’t help

Is there a reason why “billing address city is equal to villa rica” is repeated 3 times? Can it work the same with just one of them?

Only the same reason the screenshot of the address wasn’t capitalized. Just covering bases :joy:

You can take action on your store by setting up fraud filters or using third-party fraud prevention apps that automatically flag or block suspicious orders going to the same address. I’d also recommend reporting this activity directly to Shopify Support so they can review it on their end and provide additional guidance.

I’m also dealing with this. If you set up one of these workflows to cancel the order, does it stop it from going through to Printify or do you still have to cancel the order in Printify? Thanks.

I just posted about my solution to the same problem today further down in the Shopify discussion community in detail.

My simple fix is to go to your shipping options and overnight edit it where it says 50 of 50 states to untick Georgia (the shipping address state) so that the bots attempt to test out credit cards on your store doesn’t work. The next attempt will come up in your abandoned checkouts as the same amount, but without shipping. They’ll go away for a few days and then try again. After several attempts they’ll leave you alone as your store will be of no help to them testing out their card checkouts. Just remember to turn on shipping (tick the box for Georgia again) in the morning so that real customers can checkout. hope this helps, as it did with me.

see my easy fix above in reply to original poster.

If helpful to anyone, here is the second address they have been using:

133 Toronto Street South
Uxbridge ON L9P 1N2
Canada

I would also say that once we installed some of these fixes, the volume went way day to just 1-2 orders (which we void) every other day. So maybe the fact that the cards are only being authorized but not charged (ie. the difference between “voiding” and “cancelling” an order) has some impact on how the bots choose stores to test the stolen card numbers?