Skip to content

Enabling Fraud Prevention

Learn how to enable and configure fraud prevention to protect your digital products from fraudulent purchases.

Before enabling fraud prevention:

Required:

  • ✅ Shopify plan that includes fraud analysis (Shopify, Advanced, or Plus)
  • ✅ At least Basic or higher plan
  • ✅ Active shop with digital products

Note: Shopify Starter plans do not include fraud analysis.


  1. Open Alva Digital Downloads app
  2. Click Settings in the navigation menu
  3. Scroll to Fraud Prevention section

  1. Find the Enable Fraud Prevention toggle
  2. Click to turn ON (green)
  1. Settings panel expands showing configuration options

Fraud Prevention Options:

Toggle: ON (recommended)

What it does:

  • Orders flagged as “High Risk” by Shopify automatically held
  • No files sent until manual approval
  • Customer notified of delay

When to use: Always recommended for protection


Toggle: OFF (default)
Default: OFF
Recommended: Consider your risk tolerance

What it does:

  • Orders flagged as “Medium Risk” by Shopify held for review
  • May increase false positives
  • More manual review required

When to enable:

  • High-value digital products
  • History of fraud attempts
  • Extra caution needed

When to leave OFF:

  • Most orders are legitimate
  • Medium risk rarely indicates fraud
  • Want faster delivery

Toggle: OFF (default)
Use case: Special situations only

What it does:

  • Every order held regardless of fraud score
  • Manual approval required for all orders
  • Maximum control, slowest delivery

When to enable:

  • Temporary fraud spike
  • Launching new high-value product
  • Testing fraud prevention system
  • Special promotional periods

Not recommended for: Normal daily operations


  1. Review all settings
  2. Click Save button
  3. Confirmation message appears

Fraud prevention is now active!


Low Risk:

Action: Auto-approve and send files
Shopify indicates: Legitimate order

Medium Risk:

Action: Auto-approve OR hold (based on your setting)
Shopify indicates: Some suspicious signals
Default: Auto-approve

High Risk:

Action: Always hold for review (when fraud prevention enabled)
Shopify indicates: Multiple fraud indicators

Fraud prevention works with email notifications:

Email Disabled + Fraud Enabled:

- Orders held silently
- No email sent while pending
- Email sent after manual approval

Email Enabled + Fraud Enabled:

- High/medium risk orders held (based on settings)
- Pending email sent to customer
- Download email sent after approval

Email Enabled + Fraud Disabled:

- All orders auto-approved
- Download email sent immediately
- No fraud checking

After enabling, test the system:

Option 1: Use Shopify Test Orders

  1. Create test order in Shopify admin
  2. Manually set fraud analysis to “High Risk”
  3. Check if order appears in Flagged Orders
  4. Approve/reject from app

Option 2: Wait for Real Orders

  1. Enable fraud prevention
  2. Monitor next few real orders
  3. Check Flagged Orders page for holds
  4. Approve legitimate orders promptly

After enabling, verify:

  • Toggle shows ON in settings
  • Configuration saved successfully
  • High risk orders appear in Flagged Orders page
  • Test order held correctly
  • Approval/rejection works
  • Emails sent after approval (if enabled)
  • Download links work after approval

With Fraud Prevention Enabled:

1. Customer completes purchase
2. Shopify sends ORDERS_PAID webhook
3. App receives order data
4. Check: Fraud prevention enabled?
5. YES → Queue fraud check job
6. Background worker calls Shopify API
7. Retrieves fraud analysis
8. Decision:
- Low Risk → Approve + send email (if enabled)
- Medium Risk → Check settings
- Auto-approve setting ON → Approve + send email
- Auto-approve setting OFF → Hold for review
- High Risk → Always hold for review
9. Held orders → Flagged Orders page
10. Manual approval → Send email + create download link

Fraud checks run asynchronously:

  1. Order webhook received (instant)
  2. Fraud check queued (instant)
  3. Background worker processes queue (within seconds)
  4. Shopify API called (1-2 seconds)
  5. Result stored in database
  6. Action taken based on risk level

Typical timeline: 5-10 seconds from purchase to decision


Customer sees:

  1. Completes purchase
  2. Receives order confirmation (Shopify)
  3. Receives download email within seconds (if emails enabled)
  4. Downloads files immediately

No difference from orders without fraud prevention.


Customer sees:

  1. Completes purchase
  2. Receives order confirmation (Shopify)
  3. Does NOT receive download email immediately
  4. Waits for manual review
  5. After approval:
    • Receives download email
    • Can access files

Email example (if enabled):

Subject: Order Under Review
Hi [Name],
Thank you for your order. We're reviewing it for security
purposes and will send your download link shortly.
Typical review time: 1-2 hours
[Shop Name]

During review period:

  • Set expectations in order confirmation
  • Respond to customer inquiries promptly
  • Review orders within 1-2 hours (business hours)
  • Approve legitimate orders quickly
  • Communicate clearly if rejected

Symptoms:

  • Toggle switches but reverts to OFF
  • Save button doesn’t work
  • No confirmation message

Solutions:

  1. Refresh page and try again
  2. Check internet connection
  3. Verify Shopify plan includes fraud analysis
  4. Check browser console for errors
  5. Contact support if persists

Possible causes:

  1. Orders are genuinely low risk
  2. Shopify hasn’t assigned fraud analysis yet (new shops)
  3. Fraud prevention not fully activated

How to verify:

  1. Check Settings → Fraud Prevention toggle is ON
  2. Create test high-risk order
  3. Check Flagged Orders page
  4. Review recent orders in Shopify admin for fraud analysis

Cause: “Hold All Orders for Review” enabled

Solution:

  1. Go to Settings → Fraud Prevention
  2. Turn OFF “Hold All Orders for Review”
  3. Keep only “High Risk” toggle ON
  4. Save settings

Issue: Customers Not Receiving Emails After Approval

Section titled “Issue: Customers Not Receiving Emails After Approval”

Check:

  1. Email notifications enabled in Settings → Email
  2. Email provider configured (Postmark/MailerToGo)
  3. Check Email Logs for send status
  4. Verify customer email address correct
  5. Check spam folder

First time enabling:

  • ✅ Enable High Risk flagging only
  • ❌ Don’t enable Medium Risk initially
  • ❌ Don’t enable “Hold All Orders”

Why: Learn how system works before increasing restrictions.


After enabling:

  • Check Flagged Orders daily
  • Review false positive rate
  • Adjust settings if needed
  • Track customer complaints

Establish routine:

  • Check Flagged Orders 2-3 times per day
  • Respond to customer inquiries promptly
  • Review within 1-2 hours (business hours)
  • Set up notifications (if available)

Keep log of:

  • Why orders approved
  • Why orders rejected
  • Common fraud patterns
  • False positives

Benefits:

  • Consistency in decisions
  • Training for team members
  • Pattern recognition
  • Dispute resolution

Be transparent:

  • Mention security review in order confirmation
  • Provide estimated review time
  • Respond quickly to inquiries
  • Explain rejections professionally

Low-value products ($5-20):

High Risk: Flag ✅
Medium Risk: Auto-approve ✅
Reason: Speed over caution

Medium-value products ($20-100):

High Risk: Flag ✅
Medium Risk: Flag ✅
Reason: Balanced approach

High-value products ($100+):

High Risk: Flag ✅
Medium Risk: Flag ✅
Consider: Manual review for all
Reason: Maximum protection

Holiday/Sale Periods:

  • Increase fraud monitoring
  • Consider flagging medium risk
  • Review orders more frequently
  • Expect higher fraud attempts

Normal Periods:

  • Standard high-risk flagging
  • Auto-approve medium risk
  • Regular review schedule

Multiple team members:

  • Assign review responsibilities
  • Set coverage schedule
  • Document approval criteria
  • Share fraud patterns
  • Regular team check-ins

Consider disabling if:

  • Very low fraud rate (<1%)
  • Creating customer friction
  • Want faster delivery
  • Manual review burden too high
  • False positive rate high

  1. Go to Settings → Fraud Prevention
  2. Turn OFF “Enable Fraud Prevention” toggle
  3. Save settings

Effect:

  • All new orders auto-approved
  • Existing flagged orders remain held
  • Must manually approve pending orders
  • Download emails sent immediately (if enabled)

Keep fraud prevention but reduce strictness:

  1. Keep fraud prevention ON
  2. Turn OFF medium risk flagging
  3. Only flag high risk
  4. Review less frequently

Daily:

  • Review Flagged Orders page
  • Approve/reject pending orders
  • Check customer support tickets

Weekly:

  • Review fraud prevention effectiveness
  • Check false positive rate
  • Adjust settings if needed

Monthly:

  • Analyze fraud trends
  • Review rejected orders
  • Update team training
  • Assess overall impact

Fraud Prevention Performance:

  • Total orders flagged
  • Approved vs. rejected ratio
  • False positive rate
  • Average review time
  • Customer complaints
  • Actual fraud prevented