Fraud Protection, Blocklists & Phone Verification — RUTHH COD Form & Upsells

Configure Fraud Protection → User Blocking (/app/fraud) to automatically screen every Cash on Delivery submission against velocity abuse, duplicate orders, excessive quantities, and phone/email/IP blocklists, and understand the current architecture of Integrations → SMS & WhatsApp (/app/integrations/messaging).

• You have access to Fraud Protection (/app/fraud) in Shopify Admin.

1. Navigate to Fraud Protection (/app/fraud).
2. Enable Order Velocity Limit to restrict how many COD orders a single buyer identity (matched across IP address, normalized phone number, or email) can place within a rolling window.
3. Choose the Maximum Orders count (default 3 orders) and the Time Window Preset (from 1h, 6h, 12h, 24h default, 48h, 72h, 7d, 14d, 30d up to 6mo).

1. Toggle Duplicate Order Detection on and select the lookback window (default 72 hours). This blocks repeated submissions containing the same buyer phone/email and identical product variant payload within the window.
2. Enable Maximum Product Quantity Limit and select a cap between 1 and 10 units (1..10) to prevent abusive bulk COD orders that lock up inventory.

1. In the Blocklists & Allowlists section of /app/fraud, enter one entry per line in the multiline text areas:
   • Blocked Phone Numbers: Normalized phone numbers or prefixes.
   • Blocked Emails: Specific email addresses or domains.
   • Blocked IP Addresses: Client IPv4 / IPv6 addresses.
   • Trusted IP Addresses (Allowlist): Office, call-center, or QA IP addresses that bypass velocity and IP blocklist checks during testing or manual phone-order entry.

1. Customize the four category-specific rejection messages shown when a submission is blocked:
   • General Block Message
   • Order Velocity Limit Message
   • Duplicate / Repeat Order Message
   • Security / Blocklist Message
2. Click Save in the SaveBar.

Phone verification and messaging settings live under Integrations → SMS & WhatsApp (/app/integrations/messaging) rather than the Fraud Protection page.

• Legitimate repeat customer was blocked: Check whether the customer submitted the exact same variant twice within the 72-hour duplicate window or exceeded the 24-hour velocity limit. You can adjust the window preset in /app/fraud.
• Quantity Offer tier is blocked at submission: Ensure your Maximum Product Quantity Limit (1..10) in /app/fraud is at least as large as your highest Quantity Offer tier.

• Order Creation Modes & Google Sheets Export
• Troubleshooting Guide
• Data Privacy & GDPR