The decision is margin math, not gut feel. Cancelling costs you margin on a possibly-legitimate order; fulfilling a fraudulent one costs goods + amount + $15 + rate damage. At typical 30% margins, fulfilling a flagged order breaks even when its true fraud probability is under ~20%. Above that, verify or cancel. The verify step — a 2-minute email or SMS to the customer — rescues most of the false positives that blanket cancellation throws away.
The break-even math
For a $100 order at 30% margin:
- Cancel a legit order: lose $30 margin.
- Fulfill a fraud order: lose ~$70 goods cost + $100 reversal + $15 fee ≈ $185, minus what representment recovers.
Cancelling breaks even when fraud probability ≥ ~30/185 ≈ 16–20%. Shopify's 'medium' bucket is usually well under that; unreviewed 'high' with multiple card attempts is usually well over. That's the whole framework — plug your own AOV and margin into the calculator.
The verify middle path
Before cancelling, spend 2 minutes:
- Email or SMS the customer: "Quick security check on your order — reply to confirm you placed it." Fraudsters almost never reply; gift-buyers and VPN users do.
- Check order history — a returning customer with 3 clean orders is almost never stolen-card fraud.
- Compare the shipping name to the cardholder name — mismatches are normal for gifts but combined with IP distance they matter.
Merchants using verify-first typically rescue 40–60% of flagged orders that blanket cancellation would have killed.
A 3-tier process that scales
- Low risk: fulfill automatically.
- Medium risk: fulfill, but hold same-day/expedited shipping for 12–24h — most fraud pressure-tests fast shipping.
- High risk: verify via email/SMS; cancel if no response in 24h.
Aurai Prevent automates this triage with a chargeback-trained score (not just checkout signals) and flags the orders genuinely worth your attention — included free with Aurai for Shopify.
Frequently asked questions
Do cancelled orders count against my chargeback rate?
No. Cancelled-and-refunded orders never become chargebacks. That's the point of cancelling — but do the margin math before making it your default.
What if a high-risk order already shipped?
Contact the carrier for an intercept if it's true fraud, and document everything — the same evidence supports your representment if a dispute lands.
Post reflects public documentation, industry surveys, and Aurai's own book of disputes as of the publish date. Visa, Mastercard, American Express, Discover, Stripe, PayPal, and Shopify are trademarks of their respective owners; Aurai is independent and not endorsed by any of them. Network rules change — always verify current official rules before acting on any specific tactic.