u/Prudent_Hat_6714

Hi everyone,

I’m a new Shopify store owner and currently only accept credit card payments. Recently, I received an order that was flagged as High Risk by Shopify, and I'd love to get some advice from experienced sellers on whether I should ship it or cancel it.

Here are the details of the situation:

1. The Order Details:
   • IP/Location: Placed from Waterford, Michigan, using a web proxy (high-risk internet connection).
   • Addresses: The billing address is in Singapore, but the shipping address is in Michigan, USA.
   • Card Checks: CVV and billing address ZIP code checks were unavailable/unmatched.
2. The Suspicious Inquiry: While I was on vacation, I received an email inquiry asking if a certain product could be shipped to the US, mentioning that the person's orders on other websites were frequently canceled. I replied that it shouldn't be a problem. However, less than an hour later, someone placed an order for this exact product, but the email address used for this order is different from the person who made the inquiry.
3. The Buyer's Behavior: A day after placing the order, the buyer proactively contacted me asking if it has been shipped yet.

This feels like a classic carding/fraud scam to me. I've heard about the method of adding a random suffix/code to the billing descriptor to verify if a customer truly has access to their bank statement, but unfortunately, I'm not using Shopify Payments right now so I can't do that.

Should I cancel and refund this order immediately? How do you guys usually handle orders like this? Any advice would be greatly appreciated!