Shopify Order Canceled for Fraud? How to Reply to the Buyer

Many people who send these tickets are real customers. Fraud checks look at signals, and a real buyer can set them off by shipping to a new address, paying with a work card or ordering from abroad. So your reply has two jobs. It should keep a good customer, and it should not show a fraudster how your checks work.

Why these tickets are hard to answer

Shopify’s fraud analysis “indicates whether an order has a low, medium, or high risk of a chargeback due to fraud” (Shopify Help, Fraud analysis). When you cancel an order, Shopify lets you choose whether to refund and whether to notify the customer. Check what was selected on the order before you reply. If the customer got no email, or one that explains nothing, they will write in.

That customer is often upset. They see a canceled order with no explanation, and some take it to mean they’ve been called a thief. Whoever answers has to calm them down while saying almost nothing about the reason.

The two usual mistakes go in opposite directions:

• Too open. “Your billing and shipping addresses didn’t match, and your IP was in another country.” A fraudster now knows what to change next time.
• Too cold. “Your order was flagged. We cannot help further.” A real customer leaves, and you lose a sale for no reason.

The four situations, and the reply for each

Every one of these tickets fits one of four cases. Check the order in Shopify before you reply.

1. Order canceled and refunded

Here the customer wants to know what happened and where their money is. Send this only after the refund shows on the order in Shopify.

Subject: Your order #1234 was canceled, and your refund has been issued

Hi Sarah,

We canceled order #1234 because we couldn’t verify the payment. This is a routine check that protects our customers’ cards. It doesn’t mean we think you did anything wrong.

We’ve refunded the full amount to your original payment method. How long it takes to appear on your statement depends on your bank.

If you’d like to order again, reply to this email and we’ll check the details with you first.

Thanks for your patience,
The Northwind Goods team

Look at what the reply leaves out: there is no signal, no score and no promise. Asking the customer to reply keeps the next step in your team’s hands instead of sending them straight back to checkout.

2. Order on hold, not yet canceled

You still have a choice in this case. Ask for a light verification and say in plain words what you need. Good requests:

• the billing address exactly as their bank has it;
• the phone number on the order;
• a reply from the email address used at checkout.

Don’t ask for a photo of the card or an ID scan by email unless your team has a secure way to handle them. You usually don’t need them, and holding them creates a data risk for you.

Hi James,

Before we ship order #5678, we need to confirm a couple of details. This is a routine check on some orders.

Could you reply with the billing address registered with your bank and the phone number for the order?

As soon as we have them, we’ll review the order.

Thanks,
The Northwind Goods team

Don’t give a shipping date in this reply. You don’t know the outcome yet.

3. Customer verified after the cancellation

The details may match and your team may be satisfied. Even then, don’t tell the customer to “just try again,” because the same checkout can flag the same order again. A person on your team decides what happens next: a new checkout after the review, a draft order sent from the admin, or another payment method. Leave that choice to a person, not a macro, and tell the customer only that the team will confirm the next step.

4. Real fraud signs

Sometimes the person writing in is the fraudster, trying to learn why the order failed. Sometimes the card owner writes to say they never placed the order. Neither case gets a template. Pass the ticket to a human, keep the reply neutral and don’t offer a way to order again.

What never goes in the reply

Make this a hard rule for everyone who answers tickets, whether people or AI:

1. The trigger. Never mention addresses, IP, location, card checks or the number of attempts.
2. The risk level. “Your order was rated high risk” sounds like an accusation and tells the customer nothing they can use.
3. The word “fraud.” “We couldn’t verify the payment” says the same thing without blaming anyone.
4. A guarantee. “Your next order will go through” is a promise you can’t keep.
5. A refund timeline you don’t control. The bank sets the timing, so say that.

How to write this as a rule

These tickets follow a pattern, so they work well as a written rule. Here is one split a small team might choose. Adjust it to how much risk you’re willing to take:

• Answered with the approved reply: the order is canceled, the refund shows in Shopify, and this is the customer’s first message. The reply uses the case 1 wording and ends with “reply and we’ll check,” with no link to order again.
• Goes to a person: any order still on hold, any customer who sends verification details, anyone who says they didn’t place the order, and any second message on the same case.

Relay is an AI support agent that understands your product, answers customer questions, takes action, and knows when to bring in your team. You write rules like this one and set the permissions, so you decide where the line falls. For the handoff itself, see our guide on how to set up human handoff rules in a Shopify AI agent.

Two other guides are closely related. If the money never left the card, it’s a different ticket: see how to reply to a failed payment on Shopify. If you shipped a risky order and a dispute is on the way, read our page on Shopify chargeback prevention.

Fix the cancellation email first

Many of these tickets start because the notification says too little. Before you work on your replies, edit the email customers get when you cancel an order. Three lines do most of the work:

• we couldn’t verify the payment;
• the full amount has been refunded, and the bank sets the timing;
• if you’d like to order again, reply to this email and we’ll check the details with you first.

When the email already gives those three facts, many customers won’t need to write in. Those who do will already know that the next step is a reply, not a new checkout.

The same care applies after an order is placed, because a late address change can also be a fraud sign. If you get those requests on risky orders, our guide on whether to accept a Shopify address change request explains what to check.

FAQ

Why was my customer’s order canceled as fraudulent?

Shopify’s fraud analysis rates the risk of an order. It’s then up to you, or an automation you’ve set up, to cancel it. Real buyers can trigger the same signals as fraudsters, so a canceled order doesn’t prove fraud.

Does the customer get an email when I cancel the order?

It depends on what was selected when the order was canceled. When you cancel an order, Shopify lets you choose whether to notify the customer, so check the order before you reply. If you send that email, edit the template so it says the payment couldn’t be verified, that the refund has been issued, and that the customer can reply if they want to order again.

Can a customer order again after a fraud cancellation?

They can, but have a person review it first. Ask the customer to reply instead of going back to checkout. Your team then confirms their details and decides how the new order is placed.

Is the customer refunded when I cancel a high-risk order?

It depends on what was chosen at cancellation. When you cancel an order, Shopify lets you choose whether to refund, so check what was selected on the order before you reply. Never promise when the money will arrive, because the bank sets the timing.