Should you fulfill a Shopify order flagged as medium risk?

What does a medium risk flag on a Shopify order mean?

The flag estimates an outcome; it makes no finding about your buyer. Shopify's fraud recommendation sorts an eligible online credit card order into one of three levels — low, medium or high — and what it rates is the risk of a chargeback due to fraud, not fraud itself.

The score comes from machine learning trained on historical transactions across all Shopify stores. The indicators the fraud-analysis page names are the AVS check on the card, the CVV code, whether the customer's location matches the payment method, unusual device or network activity, and whether the customer tried more than one credit card — a list it introduces with the words "can include".

No Shopify page we have found publishes the full set of signals or how they are weighted: as of October 12, 2026 this answer is read off the order-protection, fraud-analysis and Flow pages in the Help Center plus the fraud-solutions page on shopify.com, and beyond that partial list the order-protection page adds only "IP address details" and "unusual purchase patterns".

What to check before you fulfill a medium-risk order

Medium is the level where a few minutes of your own work beats the model: it scores probability, you can check facts. Start with the five indicators below, and read each for what it does not settle. But the check that usually settles the order is the customer's own answer: contact them on the details they gave and confirm the purchase and the delivery address.

None of them decides the order alone. A customer who goes quiet after you ask them to confirm the order has told you what the score could not, and that silence is a reason to cancel rather than ship.

What does getting it wrong cost, each way?

The two ways of getting this wrong are not the same size. Cancelling a good order costs the margin on that order and whatever the customer thinks of you afterwards; the goods stay on your shelf.

A fraud chargeback costs the goods and the money. On Shopify Payments the disputed amount is deducted from your next available payout, and the fee for processing the dispute is debited separately — $15 USD in the United States, €15 EUR in most European countries — and it comes back only if you win, though Shopify's chargebacks overview says even then the refund depends on your country or region. Where that lands before a payout reaches your bank is worth knowing before it happens.

How often a medium-risk order ends in a chargeback is not a number we can give you: no Shopify page we have found publishes that rate — not the fraud-analysis, order-protection or fraud-solutions pages, read on October 12, 2026. So read the asymmetry as a matter of direction rather than probability. Shopify itself doesn't decide a dispute — the customer's bank and card company do — and how to answer one has its own guide.

When the loss is not yours, and what a pattern costs

Shopify Protect can take the loss off you, on a narrow set of conditions. If an eligible protected order receives a fraudulent chargeback, you are reimbursed the chargeback amount and the chargeback fee — but eligibility stacks: you must be located in the United States and have a United States Shopify Payments account, the order must be processed through Shop Pay, it must contain only physical items requiring shipping, and it must be fulfilled with valid tracking within 7 days and in transit within 10.

More conditions apply than the ones above, and the fuller list is set out alongside the high-ticket fraud controls. Shopify's eligibility page adds a separate rule for Managed Markets orders processed using Shopify Payments: Managed Markets orders carry their own Protect rule. The Shop Pay condition leaves PayPal orders outside Protect, and what covers those instead is a separate answer.

Ignoring the flag as a habit is a different risk from ignoring it once. A reserve can be initiated on your Shopify Payments account following an assessment that identifies an increased level of risk, and a store that is placed in a chargeback monitoring program and does not bring its chargeback level down may receive fines or lose the ability to process credit card payments. How a store gets back out of Shopify's network dispute resolution program is its own answer.