The decision is margin math, not gut feel. Cancelling costs you margin on a possibly-legitimate order; fulfilling a fraudulent one costs goods + amount + $15 + rate damage. At typical 30% margins, fulfilling a flagged order breaks even when its true fraud probability is under ~20%. Above that, verify or cancel. The verify step — a 2-minute email or SMS to the customer — rescues most of the false positives that blanket cancellation throws away.
The break-even math
For a $100 order at 30% margin:
- Cancel a legit order: lose $30 margin.
- Fulfill a fraud order: lose ~$70 goods cost + $100 reversal + $15 fee ≈ $185, minus what representment recovers.
Cancelling breaks even when fraud probability ≥ ~30/185 ≈ 16–20%. Shopify's 'medium' bucket is usually well under that; unreviewed 'high' with multiple card attempts is usually well over. That's the whole framework — plug your own AOV and margin into the calculator.
The verify middle path
Before cancelling, spend 2 minutes:
- Email or SMS the customer: "Quick security check on your order — reply to confirm you placed it." Fraudsters almost never reply; gift-buyers and VPN users do.
- Check order history — a returning customer with 3 clean orders is almost never stolen-card fraud.
- Compare the shipping name to the cardholder name — mismatches are normal for gifts but combined with IP distance they matter.
Merchants using verify-first typically rescue 40–60% of flagged orders that blanket cancellation would have killed.
A 3-tier process that scales
- Low risk: fulfill automatically.
- Medium risk: fulfill, but hold same-day/expedited shipping for 12–24h — most fraud pressure-tests fast shipping.
- High risk: verify via email/SMS; cancel if no response in 24h.
Aurai Prevent automates this triage with a chargeback-trained score (not just checkout signals) and flags the orders genuinely worth your attention — included free with Aurai for Shopify.
Frequently asked questions
Do cancelled orders count against my chargeback rate?
No. Cancelled-and-refunded orders never become chargebacks. That's the point of cancelling — but do the margin math before making it your default.
What if a high-risk order already shipped?
Contact the carrier for an intercept if it's true fraud, and document everything — the same evidence supports your representment if a dispute lands.
Post reflects public documentation and industry surveys as of the publish date. Win rates and other figures are indicative ranges, not guarantees and not Aurai results; outcomes vary by merchant, evidence, and issuer. Visa, Mastercard, American Express, Discover, Stripe, PayPal, and Shopify are trademarks of their respective owners; Aurai is independent and not endorsed by any of them. Network rules change — always verify current official rules before acting on any specific tactic.