The seven: reshipper/freight-forwarder addresses, quantity anomalies (five identical phone cases), email-name mismatch (order name John Smith, email kzx91@...), rush-everything on first orders, address-format tells (unit numbers appended oddly), multiple cards across recent orders to one address, and the post-order upgrade attempt (email asking to reroute or expedite after payment). Each pattern alone is a flag; combinations are near-certainty. Pattern literacy makes manual review fast and calibrates whatever automation you run.
The seven patterns
- Reshipper addresses: freight forwarders and package consolidators (recognizable suite-number patterns, known ZIP clusters) mean the real destination is hidden — standard for resale fraud.
- Quantity anomalies: five identical high-value items is inventory acquisition, not shopping.
- Email-name mismatch: order placed as 'John Smith' with `kzx91m@outlook.com`. Real customers' emails usually echo their names.
- Rush-everything first orders: overnight shipping on a first-ever order, especially high-value — fraud pressure-tests the window before cards get reported.
- Address-format tells: hand-off instructions in address line 2, oddly appended unit numbers, GPS-coordinate-style entries.
- Card rotation to one address: multiple recent orders, different cards, same shipping destination — a stolen-card portfolio being spent.
- The post-order upgrade: an email minutes after checkout asking to expedite or reroute — committing you before review catches up, or defeating address-based defenses.
Combination logic
Single patterns have innocent explanations — forwarders serve real expats, gift-buyers rush ship. Two patterns together collapse the innocent space fast; three is actionable near-certainty.
Use patterns as review triggers, not auto-cancel triggers: verify-first rescues the false positives. And feed confirmed hits back into rules — your own loss history is the best pattern library. Aurai Prevent encodes these patterns plus outcome data from disputes across its book — pattern literacy at model scale, with your review time reserved for the genuinely ambiguous.
Frequently asked questions
What's the single strongest visible fraud signal?
Combination of reshipper destination + first order + rush shipping. Individually explainable; together they describe professional resale fraud.
Should these patterns auto-cancel orders?
No — trigger review and verification. Every pattern has a legitimate long tail; auto-cancel converts pattern-matching into revenue loss.
Post reflects public documentation and industry surveys as of the publish date. Win rates and other figures are indicative ranges, not guarantees and not Aurai results; outcomes vary by merchant, evidence, and issuer. Visa, Mastercard, American Express, Discover, Stripe, PayPal, and Shopify are trademarks of their respective owners; Aurai is independent and not endorsed by any of them. Network rules change — always verify current official rules before acting on any specific tactic.