Fraud Control

My store is being used to test stolen credit cards. It only blocks high risk transactions. I cannot block medium risk transactions. I've had multiple chargebacks and considering shutting down my store. No help from Shopify.

There is no option to block the whole domain from which the fraudulent transactions / abandoned fake baskets come from. In my case it's @example.com . Multiple different emails from this domain. I cannot possibly block each and every fake email address, I would like to block the whole 'example' domain. Also, there is no option to block specific names/customers.

The app is useful if you take the time to understand and configure the rules correctly. Managing the messaging shown to customers when a checkout is blocked is important, as the default language is too soft for effective deterrence.

One major drawback is the lack of visibility into who is actually being blocked at checkout. All blocked users remain anonymous, so you only see aggregate counts rather than actionable detail. Greater transparency here would significantly improve the product.

Lastly, you can edit what the blocked customer sees by searching the language for "Decision rule block"

A bot is using my store to test stolen credit cards. I contacted Shopify support about it and they said to install this app and it'll help to stop the attacks. Well, this app does nothing to stop the attacks from happening. I'm still getting hundreds of abandoned carts with card details and fraudulent orders are still getting through.

To access this app’s functionality, you need to open the “Rules” submenu from the left-hand navigation. Unfortunately, this submenu does not always appear and may require refreshing the browser tab.

Additionally, pinning the app to navigation can cause it to disappear entirely. If this happens, you’ll need to locate the app via search, open the (…) menu in the upper-right corner, and unpin it from navigation. After refreshing your browser and reopening the app from search, Fraud Control should reappear in the left-hand menu under Apps.

At that point, another refresh is often required before the Rules submenu becomes visible.

5 months later, a discovery:

At first glance, it seems like you can only block a single email address per rule, which makes the feature feel pretty limited. It is possible to filter by more specific conditions like IP address, billing address line 1, billing ZIP code, shipping address line 1, and shipping ZIP code, but the interface makes this incredibly hard to discover.

You have to go into “Rules” and add parameters one by one, and each click reveals a RANDOM different field. There’s no visible list of what’s available, so the only way to find them is by repeatedly clicking through options. It’s a very unintuitive setup, but it does allow you to block highly specific details like a billing or shipping address.

According to the help file, to block someone, you need to create a rule. To create you should
"1.From your Shopify admin, go to Apps > Fraud Control.
2.Click Rules.3.Click Create rule."
However, there is no "Rules" button to click. This app basically displays very general fraud information for your Shopify store, but doesn't do anything to help you control it.

I think that the reviewers that are giving low scores here are missing the boat. This tool adds some powerful capabilities. It is not just the dashboard. It seems to conditions to FLOW. We were paying a 3rd party company to guarantee our orders against fraud. They accepted more than 99% of the orders which was good, but at a cost that added up to a high monthly amount. After installing Fraud Control, I went to create some creative FLOWs (you need this free app too) and each time an order came in it runs through plenty of rules and uses the fraud risk score which has been pretty good. AVS, and a slew of other properties of the order. I also exempt regular orders from this check and exempt Shop Protect orders from this check. I believe that we will have almost the same success rate as we had with the paid company. I let it run for a few weeks together and now removed the paid company. (I gave them a chance to reduce their cost first)

I just added this to my 2nd store today, because of the success with the first store.

I run this in conjunction with a paid invoice printing app and when the printing app sees a Fraud tag on the order (add by my flow), it prints a big "Don't ship - FRAUD" on the order. Now, I just need to add the same thing for a "HOLD" which I sometimes add to the order when needed in further examination which I haven't needed so far.

I hope that everyone sees the benefit that I do and get the most from it causing Shopify to build it our even better.

It literally does nothing that is new or useful. Just a dashboard, that tells you how many charge backs. Useless. I would have thought a basic template would be to block by IP, and other patterns, rather than just email address. Don't bother.

Add a option to ban bot with one making more than x chechouts per minute. Because right now One bot making a lot of chechout and testing a lot of stealed cards.

Simple to use and easy rule creation to block known fraudsters from checking out.